Live › vulnerability › CVE-2026-117937
Go to dashboardFirefox's JavaScript engine mishandles a pointer, which is a memory-safety bug. The sources do not say what an attacker can achieve with it, and the description gives no severity.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox builds older than the fixed releases, on desktop or in ESR deployments. The sources do not say whether the flaw needs a particular page or setting to trigger. Teams that run only the fixed versions can skip it.
No product ranges from the sources yet.
firefox --version; versions below 159, 115.44 (ESR), or 153.6 (ESR) are affected.159 or later, or to ESR 115.44 or 153.6.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Invalid pointer in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117937")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.