Use-after-free in the DOM: Editor component. This vulnerability was fixed in Firefox 160.