CVEvulnerability
CVE-2026-117866
- Status
- Deferred
- Published
- 2026-10-27
- Last modified
- 2026-10-27
- Assigner
- [email protected]
Description
Privilege escalation due to use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=2059011 bugzilla.mozilla.org
- https://www.mozilla.org/security/advisories/mfsa2026-118/ www.mozilla.org
- https://www.mozilla.org/security/advisories/mfsa2026-119/ www.mozilla.org
- https://www.mozilla.org/security/advisories/mfsa2026-120/ www.mozilla.org
- https://www.mozilla.org/security/advisories/mfsa2026-121/ www.mozilla.org
- https://www.mozilla.org/security/advisories/mfsa2026-122/ www.mozilla.org