Live › vulnerability › CVE-2026-117890
Go to dashboardThe JIT compiler in Firefox's JavaScript engine generated incorrect machine code in some cases. A malicious web page could use this to corrupt memory and potentially run code in the browser.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams whose staff or automated tools use Firefox or Firefox ESR to browse untrusted web content are exposed on versions before the fix. Servers that do not run a browser, and systems that only use other browsers, are not affected by this entry. The sources do not say which configurations are most at risk.
No product ranges from the sources yet.
firefox --version153.6159 or later153.6 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117890")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.