Use-after-free in the DOM: Animation component
CVE-2026-118012

Currently unrated

Key Information:

Vendor

Mozilla

Status
Vendor
CVE Published:
27 October 2026

What is CVE-2026-118012?

Use-after-free in the DOM: Animation component. This vulnerability was fixed in Firefox 159.

Affected Version(s)

Firefox 159

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

OpenAI Codex Security (kylebot)
.