Live › vulnerability › CVE-2026-117960
Go to dashboardA spoofing flaw in the DOM Core and HTML component of Firefox lets a page present misleading content to the user. The sources do not say what exact content can be spoofed or what an attacker gains beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams whose staff or systems run Firefox or Firefox ESR on desktops or servers that browse web content. The sources do not name a specific configuration or data path, so unknown whether any setup is excluded.
No product ranges from the sources yet.
firefox --version; releases before 159 and ESR before 153.6 are the ones named as fixed.159 or later, or Firefox ESR to 153.6 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Spoofing issue in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117960")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.