{"id":"CVE-2026-117926","kind":"vulnerability","aliases":["CVE-2026-117926"],"related":[],"title":"Firefox: incorrect boundary checks in SVG component, fixed in 159","description":"Incorrect boundary conditions in the SVG component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.","summary":"Firefox's SVG rendering code has incorrect boundary conditions, a memory-safety class of flaw. The sources do not say what an attacker can achieve beyond that, so the exact impact is unknown.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","desktop","firefox","runtime"],"not_affected_if":["already-on-fixed-version"],"how_to_check":"- Check the installed Firefox version in About Firefox or with `firefox --version`; releases before `159`, `115.44` ESR, or `153.6` ESR are in scope.","fix":"- Update Firefox to `159` or to ESR `115.44` or `153.6`.","status":"open","published_at":"2026-10-27T14:16:48+00:00","first_seen_at":"2026-10-27T14:32:23+00:00","triaged_at":"2026-10-27T14:37:11+00:00","updated_at":"2026-10-27T14:37:11+00:00","category":"runtime","confidence":0.4,"triage":{"at":"2026-10-27T14:37:11Z","model":"claude-haiku-5-5","output":{"fix":"- Update Firefox to `159` or to ESR `115.44` or `153.6`.","reach":"internet","title":"Firefox: incorrect boundary checks in SVG component, fixed in 159","impact":"medium","summary":"Firefox's SVG rendering code has incorrect boundary conditions, a memory-safety class of flaw. The sources do not say what an attacker can achieve beyond that, so the exact impact is unknown.","category":"runtime","nicknames":[],"who_cares":["firefox","browsers","desktop"],"confidence":0.4,"needs_auth":"unknown","worst_case":"unknown; sources do not describe the attacker outcome","analyst_note":"Check the Mozilla security advisory for this CVE to learn whether memory corruption or code execution is possible and whether user interaction is required.","how_to_check":"- Check the installed Firefox version in About Firefox or with `firefox --version`; releases before `159`, `115.44` ESR, or `153.6` ESR are in scope.","needs_analyst":true,"not_affected_if":["already-on-fixed-version"],"who_is_affected":"Anyone running Firefox on a version older than the fixed releases is potentially exposed, since the flaw is in the browser's SVG handling that runs when a page or image is rendered. Teams that only run managed Firefox builds pushed by IT can confirm the version centrally. The sources do not say whether the flaw is reachable without user interaction.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000593,"input_tokens":3250,"output_tokens":535,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117926':13A,16A '-2026':12A,15A '115.44':71C '153.6':75C '159':10A,68C 'achiev':46B 'attack':44B 'beyond':47B 'boundari':3A,28B,56C 'browser':17B 'check':4A 'class':34B 'code':25B 'compon':7A,61C 'condit':29B,57C 'cve':11A,14A 'desktop':18B 'esr':70C,74C 'exact':51B 'firefox':1A,19B,21B,67C,69C,73C 'fix':8A,65C 'flaw':36B 'impact':52B 'incorrect':2A,27B,55C 'memori':32B 'memory-safeti':31B 'render':24B 'runtim':20B 'safeti':33B 'say':41B 'sourc':38B 'svg':6A,23B,60C 'unknown':54B 'vulner':63C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Firefox on a version older than the fixed releases is potentially exposed, since the flaw is in the browser's SVG handling that runs when a page or image is rendered. Teams that only run managed Firefox builds pushed by IT can confirm the version centrally. The sources do not say whether the flaw is reachable without user interaction.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T14:16:48+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117926","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117926","severity":null,"published_at":"2026-10-27T14:16:48+00:00","modified_at":"2026-10-27T14:16:48+00:00","first_seen_at":"2026-10-27T14:32:23+00:00","fetched_at":"2026-10-27T14:32:23+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}