Live › vulnerability › CVE-2026-117917
Go to dashboardFirefox's WebRender graphics component dereferences an invalid pointer, a memory-safety flaw. The sources do not say what an attacker can achieve beyond that, and the fix ships in Firefox 159 and ESR 115.44 and 153.6.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox builds older than the fixed releases on desktop or managed browser fleets. The sources do not say whether the flaw needs a specific page, setting or platform, so unknown whether some configurations are safe.
No product ranges from the sources yet.
firefox --version (or check About Firefox) and compare with 159, 115.44 or 153.6 for ESR159 or later115.44 or 153.6Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117917")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.