Live › vulnerability › CVE-2026-117955
Go to dashboardA bug in Firefox's JavaScript JIT compiler, in the WebAssembly component, miscompiles code. The sources do not say what an attacker gets from it, beyond the miscompilation itself.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox builds older than Firefox 159 or Firefox ESR 153.6. The sources do not say which configurations or content are needed to trigger it, so unknown whether a web page alone is enough.
No product ranges from the sources yet.
firefox --version or Help > About Firefox; unknown whether earlier versions are affected beyond the fixed releases.159 or Firefox ESR to 153.6, the versions the sources say fixed it.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
JIT miscompilation in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117955")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.