A use-after-free vulnerability exists in Firefox and Thunderbird when JavaScript code runs during document transformation with the XSLTProcessor. This flaw affects Firefox versions prior to 137, Firefox ESR versions prior to 115.22 and 128.9, Thunderbird versions prior to 137, and Thunderbird ESR versions prior to 128.9. The vulnerability could lead to memory corruption with potential impact on availability and integrity.