Live › vulnerability › CVE-2026-117961
Go to dashboardFirefox's Layout: Text and Fonts component has incorrect boundary conditions, a memory-safety class of bug. The sources do not say what an attacker gets beyond that, and the fix is in Firefox 159 and Firefox ESR 153.6.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox or Firefox ESR older than the fixed versions, since the flaw is in the browser's text and font rendering path and a page can reach it. The sources do not say whether any specific content or configuration is required, so unknown whether some installs can skip it.
No product ranges from the sources yet.
Help > About Firefox and read the version; anything below 159 (or ESR below 153.6) is exposed159 or later153.6 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117961")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.