Live › vulnerability › CVE-2026-117956
Go to dashboardThe Nimbus Desktop Client component in Firefox contains an invalid pointer bug. The sources do not say what an attacker gets beyond the memory corruption itself.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams that run or depend on desktop Firefox builds older than Firefox 159 or Firefox ESR 153.6 are affected. The sources do not say what configuration or data path makes a system exposed, so unknown beyond that.
No product ranges from the sources yet.
firefox --version and compare against 159 or 153.6 for ESR159 or Firefox ESR to 153.6Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Invalid pointer in the Nimbus Desktop Client component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117956")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.