Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-118017

Use-after-free in the SVG component

Description

Use-after-free in the SVG component. This vulnerability was fixed in Firefox 159 and Thunderbird 159.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox

  • 159 to ≤ *unaffected

Mozilla Thunderbird

  • 159 to ≤ *unaffected

References