Live › vulnerability › CVE-2026-117915
Go to dashboardFirefox's Block and Inline layout component mishandles boundary conditions, a memory-safety style flaw the sources do not detail. The fix shipped in Firefox 159, Firefox ESR 115.44 and Firefox ESR 153.6, and the sources do not say what an attacker gets from it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox or Firefox ESR builds older than the fixed versions. The sources do not say whether a page alone triggers it or whether any configuration changes exposure.
No product ranges from the sources yet.
firefox --version or check About Firefox and compare against 159, 115.44 or 153.6 for ESR159 or later115.44 or 153.6Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect boundary conditions in the Layout: Block and Inline component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117915")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.