{"id":"CVE-2026-117879","kind":"vulnerability","aliases":["CVE-2026-117879"],"related":[],"title":"Firefox: incorrect boundary handling in Layout Tables component, fixed in 159","description":"Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.","summary":"Firefox's Layout Tables component mishandles boundary conditions, a memory-safety style flaw the sources do not detail. The fix ships in Firefox 159 and Firefox ESR 115.44 and 153.6, and the sources do not say what an attacker gets.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","desktop","firefox","runtime"],"not_affected_if":["fixed-version"],"how_to_check":"- Run `firefox --version` or check Help > About Firefox and compare against `159`, `115.44` or `153.6`\n- unknown","fix":"- Update Firefox to `159` or later\n- Update Firefox ESR to `115.44` or `153.6`","status":"open","published_at":"2026-10-27T14:16:43+00:00","first_seen_at":"2026-10-27T14:32:21+00:00","triaged_at":"2026-10-27T14:39:06+00:00","updated_at":"2026-10-27T14:39:06+00:00","category":"runtime","confidence":0.4,"triage":{"at":"2026-10-27T14:39:06Z","model":"claude-haiku-5-5","output":{"fix":"- Update Firefox to `159` or later\n- Update Firefox ESR to `115.44` or `153.6`","reach":"internet","title":"Firefox: incorrect boundary handling in Layout Tables component, fixed in 159","impact":"medium","summary":"Firefox's Layout Tables component mishandles boundary conditions, a memory-safety style flaw the sources do not detail. The fix ships in Firefox 159 and Firefox ESR 115.44 and 153.6, and the sources do not say what an attacker gets.","category":"runtime","nicknames":[],"who_cares":["firefox","browsers","desktop"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown; sources do not describe the impact","analyst_note":"Check the Mozilla advisory for CVE-2026-117879 to learn the impact, trigger conditions and whether it is exploited.","how_to_check":"- Run `firefox --version` or check Help > About Firefox and compare against `159`, `115.44` or `153.6`\n- unknown","needs_analyst":true,"not_affected_if":["fixed-version"],"who_is_affected":"Anyone running Firefox or Firefox ESR builds older than the fixed versions, on desktop or in managed fleets. The sources do not say whether specific page content, configurations or platforms are required to trigger it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000579,"input_tokens":3258,"output_tokens":507,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117879':14A,17A '-2026':13A,16A '115.44':50B,80C '153.6':52B,84C '159':11A,46B,77C 'attack':61B 'boundari':3A,28B,64C 'browser':18B 'compon':8A,26B,70C 'condit':29B,65C 'cve':12A,15A 'desktop':19B 'detail':40B 'esr':49B,79C,83C 'firefox':1A,20B,22B,45B,48B,76C,78C,82C 'fix':9A,42B,74C 'flaw':35B 'get':62B 'handl':4A 'incorrect':2A,63C 'layout':6A,24B,68C 'memori':32B 'memory-safeti':31B 'mishandl':27B 'runtim':21B 'safeti':33B 'say':58B 'ship':43B 'sourc':37B,55B 'style':34B 'tabl':7A,25B,69C 'vulner':72C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Firefox or Firefox ESR builds older than the fixed versions, on desktop or in managed fleets. The sources do not say whether specific page content, configurations or platforms are required to trigger it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T14:16:43+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117879","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117879","severity":null,"published_at":"2026-10-27T14:16:43+00:00","modified_at":"2026-10-27T14:16:43+00:00","first_seen_at":"2026-10-27T14:32:21+00:00","fetched_at":"2026-10-27T14:32:21+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}