CVE-2026-118021 is a use-after-free vulnerability in the XPCOM component of Firefox that allows sandbox escape. This security flaw was addressed and fixed in Firefox version 159. The vulnerability is classified as high impact due to its potential to break sandbox protections.