CVE-2026-118025 | Mozilla Firefox up to 158 SVG Remote Code Execution

October 27, 2026 Yanac

A vulnerability described as critical has been identified in Mozilla Firefox up to 158. The impacted element is an unknown function of the component SVG. Executing a manipulation can lead to Remote Code Execution.

This vulnerability is registered as CVE-2026-118025. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More