CVE-2026-117994
Full vulnerability record from the local CVENow database.
Description
Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Severity
Not scored
CVSS score
Not available
Vulnerability status
Deferred
Source identifier
Published
2026-10-27 14:16:57.317000
Last modified
2026-10-27 19:17:25.263000
View original CVE JSON
{
"id": "CVE-2026-117994",
"sourceIdentifier": "[email protected]",
"published": "2026-10-27T14:16:57.317",
"lastModified": "2026-10-27T19:17:25.263",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Mozilla",
"product": "Firefox",
"versions": [
{
"version": "153.6",
"lessThanOrEqual": "153.*",
"versionType": "rpm",
"status": "unaffected"
},
{
"version": "159",
"lessThanOrEqual": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
},
{
"vendor": "Mozilla",
"product": "Thunderbird",
"versions": [
{
"version": "153.6",
"lessThanOrEqual": "153.*",
"versionType": "rpm",
"status": "unaffected"
},
{
"version": "159",
"lessThanOrEqual": "*",
"versionType": "rpm",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {},
"references": [
{
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2080787",
"source": "[email protected]"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-118/",
"source": "[email protected]"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-120/",
"source": "[email protected]"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-121/",
"source": "[email protected]"
},
{
"url": "https://www.mozilla.org/security/advisories/mfsa2026-122/",
"source": "[email protected]"
}
]
}