CVE-2026-117939 is a use-after-free vulnerability in the XML component of Firefox. This security flaw was addressed and fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. The vulnerability has a high impact rating according to the Mozilla advisory. There are no known exploits in the wild at this time.