CVE-2026-118023 is a use-after-free vulnerability in the Graphics: WebRender component of Firefox that allows sandbox escape. This vulnerability was fixed in Firefox version 159. The issue could enable an attacker to break out of the browser's sandbox environment, potentially leading to elevated privileges or code execution outside the intended security boundaries.