Live › vulnerability › CVE-2026-117970
Go to dashboardA race condition in the Disability Access APIs component of Firefox was fixed in Firefox 159 and Firefox ESR 153.6. The sources do not say what an attacker gains from triggering it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Any installed Firefox build older than the fixed versions is affected, as the description names no special configuration. The sources do not say whether the flaw needs accessibility features enabled or any particular page or input to trigger. Teams that run Firefox ESR should use the ESR fixed version.
No product ranges from the sources yet.
firefox --version159 and 153.6 for ESR builds159 or later153.6 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Race condition in the Disability Access APIs component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117970")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.