Live › vulnerability › CVE-2026-117886
Go to dashboardFirefox's Graphics: Text component has incorrect boundary conditions, a memory-safety style flaw whose exact effect the sources do not describe. Fixed in Firefox 159, Firefox ESR 115.44 and Firefox ESR 153.6.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running an affected Firefox build on a desktop or managed fleet that renders web content. The sources do not say whether specific configurations or content types are required, so exposure beyond unpatched versions is unknown. Teams on patched builds can skip it.
No product ranges from the sources yet.
firefox --version (or check About Firefox) and compare against 159, 115.44 or 153.6 for ESR.159 or later.115.44 or 153.6 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect boundary conditions in the Graphics: Text component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117886")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.