Live › vulnerability › CVE-2026-117971
Go to dashboardA use-after-free bug in Firefox's Print Preview component allows content to escape the browser sandbox. Fixed in Firefox 159 and Firefox ESR 115.44 and 153.6.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox builds older than 159 or ESR builds older than 115.44 and 153.6 is exposed, since the flaw is in the browser itself. Managed fleets and users who browse untrusted pages are the main concern. Systems already on a fixed build can skip it.
No product ranges from the sources yet.
firefox --version on desktop installs, compare against 159, 115.44 or 153.6159 or to ESR 115.44 or 153.6, whichever matches the installed branchEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117971")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.