Live › vulnerability › CVE-2026-117933
Go to dashboardA memory-safety style flaw in Firefox's CSS parsing and computation component allows frame poisoning, a corruption of browser internal state. The sources do not state what an attacker can achieve beyond that, and no severity was given.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox builds older than 159 or ESR builds older than 153.6. The sources do not say which configurations or content are needed to trigger it, so the exposure window beyond version is unknown.
No product ranges from the sources yet.
firefox --version or check Help, About Firefox, and compare against 159 or 153.6 for ESR.159 or Firefox ESR to 153.6 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Frame poisoning in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117933")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.