CVE-2026-118006
Description
A flaw was found in Firefox. A use-after-free vulnerability in the WebRTC (Web Real-Time Communication) signaling component allows an attacker to achieve privilege escalation. By exploiting memory that was previously freed during communication signaling, an attacker can manipulate application memory to gain elevated privileges.
Statement
Red Hat has assessed this flaw as having an impact of Important because it allows an attacker to execute arbitrary code or escalate privileges within the context of the active user session by processing malicious real-time communication signaling data. In typical Red Hat Enterprise Linux deployments, Firefox is primarily utilized on interactive workstation installations rather than headless server environments. Successful exploitation requires user interaction, specifically enticing a victim to load a malicious web page or establish a WebRTC connection controlled by the adversary.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
