CVE-2026-117906: Use-after-free in the CSS Parsing and Computation component

A vulnerability has been identified in the CSS Parsing and Computation component of Mozilla products. It is a use-after-free vulnerability classified as CWE-416. The vulnerability was fixed in Firefox 159 and Firefox ESR 115.44 and 153.6; the source also lists fixes for Thunderbird 159 and Thunderbird 153.6.