Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
History

Wed, 28 Oct 2026 00:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416

Tue, 27 Oct 2026 22:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416

Tue, 27 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Description Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159. Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.
References

Tue, 27 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Mozilla
Mozilla firefox
Vendors & Products Mozilla
Mozilla firefox

Tue, 27 Oct 2026 16:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416

Tue, 27 Oct 2026 14:15:00 +0000

Type Values Removed Values Added
Description Use-after-free in the Layout: Images, Video, and HTML Frames component. This vulnerability was fixed in Firefox 159.
Title Use-after-free in the Layout: Images, Video, and HTML Frames component
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published: 2026-10-27T14:06:01.113Z

Updated: 2026-10-27T18:17:42.258Z

Reserved: 2026-10-27T14:06:00.944Z

Link: CVE-2026-118013

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-10-27T14:16:59.100

Modified: 2026-10-27T19:17:27.150

Link: CVE-2026-118013

cve-icon Redhat

No data.