Live › vulnerability › CVE-2026-117969
Go to dashboardFirefox's JavaScript engine JIT compiler handles a pointer incorrectly. The sources do not describe what an attacker can achieve beyond that, but memory corruption in a JIT typically risks code execution in the browser.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running desktop or ESR Firefox builds older than the fixed versions is exposed, since the flaw is in the browser's JavaScript engine. Managed fleets pinned to older ESR lines should prioritize updating. Systems that do not run Firefox are not affected.
No product ranges from the sources yet.
firefox --version.153.6 or later being patched.159 or later.153.6 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Invalid pointer in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117969")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.