PatchGap
Firefox · DOM

CVE-2026-118015

Logic Error in DOM
High firefox Logic Error 🔧 Commit mapped

Overview

High
Severity
—
CVSS
No
Exploited ITW
Fixed
Fix Status
Impacthigh
DescriptionUse-after-free in the DOM: Core & HTML component
ComponentDOM
Bug ClassLogic Error
Tracker2082072
Fix commitcf96653694e3 (firefox) +1/-1
CISA KEVNot listed
CreditedOpenAI Codex Security (kylebot)
Disclosed2026-10-27

Files Changed

  • dom/webidl/Window.webidl

Patch

view commit
diff --git a/dom/webidl/Window.webidl b/dom/webidl/Window.webidl
index d31e133690a..36207ca9965 100644
--- a/dom/webidl/Window.webidl
+++ b/dom/webidl/Window.webidl
@@ -298,7 +298,7 @@ partial interface Window {
   //[Throws, NewObject, NeedsCallerType] MediaQueryList matchMedia(DOMString query);
   [Throws, NewObject, NeedsCallerType] MediaQueryList? matchMedia(UTF8String query);
 
-  [SameObject, Replaceable] readonly attribute Screen screen;
+  [Replaceable] readonly attribute Screen screen;
 
   // browsing context
   //[Throws] undefined moveTo(double x, double y);
Loading diff…
On This Page