{"id":"CVE-2026-117868","kind":"vulnerability","aliases":["CVE-2026-117868"],"related":[],"title":"Firefox: sandbox escape in the DOM networking component, fixed in 159","description":"Sandbox escape in the DOM: Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.","summary":"A flaw in the DOM Networking component of Firefox allows escaping the browser sandbox. The sources do not describe the exact attacker capability beyond the sandbox escape.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser","desktop","firefox","other"],"not_affected_if":["already-on-fixed-version"],"how_to_check":"- Check the installed Firefox version in the browser's About page or with `firefox --version`; affected builds are those before `159`, `115.44` ESR, or `153.6` ESR.\n- unknown for any further check, since the sources do not say.","fix":"- Update Firefox to `159`, or Firefox ESR to `115.44` or `153.6`.","status":"open","published_at":"2026-10-27T14:16:41+00:00","first_seen_at":"2026-10-27T14:32:21+00:00","triaged_at":"2026-10-27T14:39:18+00:00","updated_at":"2026-10-27T14:39:18+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-27T14:39:18Z","model":"claude-haiku-5-5","output":{"fix":"- Update Firefox to `159`, or Firefox ESR to `115.44` or `153.6`.","reach":"internet","title":"Firefox: sandbox escape in the DOM networking component, fixed in 159","impact":"high","summary":"A flaw in the DOM Networking component of Firefox allows escaping the browser sandbox. The sources do not describe the exact attacker capability beyond the sandbox escape.","category":"other","nicknames":[],"who_cares":["firefox","desktop","browser"],"confidence":0.5,"needs_auth":"unknown","worst_case":"Attacker escapes browser sandbox to reach the underlying system","analyst_note":"Check Mozilla's security advisory for CVE-2026-117868 for the trigger conditions and whether it is exploited in the wild.","how_to_check":"- Check the installed Firefox version in the browser's About page or with `firefox --version`; affected builds are those before `159`, `115.44` ESR, or `153.6` ESR.\n- unknown for any further check, since the sources do not say.","needs_analyst":true,"not_affected_if":["already-on-fixed-version"],"who_is_affected":"Anyone running Firefox builds older than the fixed versions, including desktop users and managed fleets that deploy Firefox. The sources do not say whether specific configurations are required to be vulnerable. unknown for any narrower scope.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000583,"input_tokens":3250,"output_tokens":515,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117868':14A,17A '-2026':13A,16A '115.44':64C '153.6':68C '159':11A,61C 'allow':30B 'attack':42B 'beyond':44B 'browser':18B,33B 'capabl':43B 'compon':8A,27B,54C 'cve':12A,15A 'describ':39B 'desktop':19B 'dom':6A,25B,52C 'escap':3A,31B,47B,49C 'esr':63C,67C 'exact':41B 'firefox':1A,20B,29B,60C,62C,66C 'fix':9A,58C 'flaw':22B 'network':7A,26B,53C 'sandbox':2A,34B,46B,48C 'sourc':36B 'vulner':56C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Firefox builds older than the fixed versions, including desktop users and managed fleets that deploy Firefox. The sources do not say whether specific configurations are required to be vulnerable. unknown for any narrower scope.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T14:16:41+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117868","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117868","severity":null,"published_at":"2026-10-27T14:16:41+00:00","modified_at":"2026-10-27T14:16:41+00:00","first_seen_at":"2026-10-27T14:32:21+00:00","fetched_at":"2026-10-27T14:32:21+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}