Live › vulnerability › CVE-2026-117868
Go to dashboardA flaw in the DOM Networking component of Firefox allows escaping the browser sandbox. The sources do not describe the exact attacker capability beyond the sandbox escape.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox builds older than the fixed versions, including desktop users and managed fleets that deploy Firefox. The sources do not say whether specific configurations are required to be vulnerable. unknown for any narrower scope.
No product ranges from the sources yet.
firefox --version; affected builds are those before 159, 115.44 ESR, or 153.6 ESR.159, or Firefox ESR to 115.44 or 153.6.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117868")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.