PatchGap
Firefox · DOM

CVE-2026-117920

Logic Error in DOM
High firefox Logic Error 🔧 Commit mapped

Overview

High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impacthigh
DescriptionUse-after-free in the DOM: HTML Parser component
ComponentDOM
Bug ClassLogic Error
Tracker2079681
Fix commit2f2d052fb8b8 (firefox) +3/-0
CISA KEVNot listed
CreditedMozilla
Disclosed2026-10-27

Files Changed

  • dom/base/MutationObservers.cpp

Patch

view commit
diff --git a/dom/base/MutationObservers.cpp b/dom/base/MutationObservers.cpp
index 2b253e9e375..9db1180188f 100644
--- a/dom/base/MutationObservers.cpp
+++ b/dom/base/MutationObservers.cpp
@@ -114,6 +114,9 @@ template <NotifyPresShell aNotifyPresShell = NotifyPresShell::After,
 static inline void Notify(nsINode* aNode, NotifyObserver&& aNotify,
                           uint32_t aCallback) {
   Document* doc = aNode->OwnerDoc();
+  if (doc->DOMNotificationsSuspended()) {
+    return;
+  }
   nsDOMMutationEnterLeave enterLeave(doc);
 
 #ifdef DEBUG
Loading diff…
On This Page