CVE-2026-117989 is a use-after-free vulnerability in the Graphics component of Mozilla products. This security flaw was addressed and fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. The vulnerability is rated with high impact by the vendor. No known exploits in the wild have been reported.