Live › vulnerability › CVE-2026-117942
Go to dashboardIncorrect boundary checks in the JIT compiler of Firefox's JavaScript engine were found. The sources do not say what an attacker gets beyond the general risk of a memory-safety flaw in the JIT.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox builds older than the fixed releases, including desktop installs and managed fleets that pin a version. The sources do not say whether the flaw needs any particular page, setting or feature to be reached. Teams that only run Firefox ESR on the listed fixed lines should confirm they are on a patched build.
No product ranges from the sources yet.
firefox --version159, 115.44 (ESR) and 153.6 (ESR)159, or to ESR 115.44 or 153.6 if you run an ESR channelEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect boundary conditions in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117942")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.