CVE-2026-117866 | BDVDB-2026-396554 Detail
MozillaFirefox
Description#
Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Impact#
Per CVSS v3.1: confidentiality impact low, integrity impact low, availability impact low. Attack vector: network.
Weaknesses#
- CWE-416 Use After Free
References#
- https://bugzilla.mozilla.org/show_bug.cgi?id=2059011
- https://www.mozilla.org/security/advisories/mfsa2026-118/
- https://www.mozilla.org/security/advisories/mfsa2026-119/
- https://www.mozilla.org/security/advisories/mfsa2026-120/
- https://www.mozilla.org/security/advisories/mfsa2026-121/
- https://www.mozilla.org/security/advisories/mfsa2026-122/
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.