CVE-2026-117974 is a use-after-free vulnerability in the XML component of Firefox. This security flaw was addressed and fixed in Firefox version 159 and Firefox ESR versions 115.44 and 153.6. The vulnerability is rated with high impact by the vendor. No public exploit or in-the-wild exploitation has been reported as of the advisory date.