Live › vulnerability › CVE-2026-117861
Go to dashboardA flaw in the DOM Navigation component of Firefox allows a sandbox escape. The sources do not say what an attacker can reach after escaping.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Any team with Firefox or Firefox ESR installed on workstations or managed browsers is potentially affected, since the flaw is in the browser itself. The sources do not say whether any particular configuration or site content is required to trigger it. Systems running only other browsers can skip it.
No product ranges from the sources yet.
firefox --version) and compare it with the fixed releases.159 or later.153.6 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
@TheHackersNews · X2026-10-27 15:14“Mozilla released Firefox 159 and security advisories for ESR 153.6 and 115.44. Fixes include CVE-2026-117861 (sandbox escape), CVE-2026-117860 (same-origin policy bypass), privilege-escalation bugs and numerous memory-safety flaws affecting browser security boundaries. https://t.co/EQtlo01qDz”
View on X
Posts are quoted with a link to the original. They are data to us, never instructions.
Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117861")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.