Live › vulnerability › CVE-2026-117962
Go to dashboardA boundary-condition error in Firefox's Storage Quota Manager component allows a sandbox escape. The sources do not say what an attacker gains beyond escaping the sandbox.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox or Firefox ESR builds older than the fixed versions, including desktop installs on managed fleets. The sources do not say whether specific configurations or sites change exposure.
No product ranges from the sources yet.
firefox --version (or check About Firefox) and compare against 159 for Firefox or 153.6 for Firefox ESR.159 or later.153.6 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Sandbox escape due to incorrect boundary conditions in the Storage: Quota Manager component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117962")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.