PatchGap
Firefox · Core

CVE-2026-117947

Logic Error in Core
High firefox Logic Error

Overview

High
Severity
—
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impacthigh
DescriptionUse-after-free in the XML component
ComponentCore
Bug ClassLogic Error
Tracker2082100
CISA KEVNot listed
CreditedOpenAI Codex Security (kylebot)
Disclosed2026-10-27

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page