CVE-2026-119332

Ladybird is a truly independent web browser. Prior to 209579c96473c75bd5eba9701fcadb841a045964, FinalizationRegistry::cleanup() in Libraries/LibJS/Runtime/FinalizationRegistry.cpp removed a dead record from m_records, retained an iterator to the next FinalizationRecord, and then invoked attacker-controlled JavaScript through the cleanup callback. If that callback called unregister() for the next record, remove_by_token() freed the node referenced by the retained iterator, and the next cleanup iteration read its target and held_value fields after free. This reliably crashes instrumented WebContent builds and creates a memory-corruption primitive in production builds. This vulnerability is fixed by commit 209579c96473c75bd5eba9701fcadb841a045964.

• CWE-416

• https://github.com/LadybirdBrowser/ladybird/commit/209579c96473c75bd5eba9701fcadb841a045964
• https://github.com/LadybirdBrowser/ladybird/security/advisories/GHSA-6cmv-xmff-qjph

Published

Oct 30, 2026

Last Modified

Oct 30, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-119325Bricks Theme 2.4 and before for WordPress contains an unauth…7.5
• CVE-2026-119328Immich is a high-performance self-hosted photo and video man…6.5
• CVE-2026-119329Immich is a high-performance self-hosted photo and video man…4.3
• CVE-2026-11933A use-after-free vulnerability exists in MongoDB Server's se…8.8
• CVE-2026-119330Immich is a high-performance self-hosted photo and video man…3.5
• CVE-2026-119331Ladybird is a truly independent web browser. Prior to the c0…7.1
• CVE-2026-119333draw.io Desktop is the official Electron build of draw.io. P…7.8
• CVE-2026-119334Pi-hole is a DNS sinkhole that protects devices from unwante…2.2
• CVE-2026-119335Pi-hole is a DNS sinkhole that protects devices from unwante…7.8
• CVE-2026-119336Pi-hole is a DNS sinkhole that protects devices from unwante…7.8
• CVE-2026-119337RAGFlow is an open-source RAG (Retrieval-Augmented Generatio…7.1
• CVE-2026-11934IBM Verify Identity Access could allow an administrator to e…7.2