Live › vulnerability › CVE-2026-117946
Go to dashboardThe JavaScript engine in Firefox has an incorrect boundary condition check, according to the NVD entry. The sources do not say what an attacker can read or run as a result.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox builds older than the fixed versions named in the advisory. The sources do not say whether a web page alone can trigger the flaw or whether a particular configuration is needed.
No product ranges from the sources yet.
about:support and compare it against 159, 115.44 (ESR) or 153.6 (ESR)159 or later, or Firefox ESR to 115.44 or 153.6Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117946")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.