{"id":"CVE-2026-117971","kind":"vulnerability","aliases":["CVE-2026-117971"],"related":[],"title":"Firefox: use-after-free in Print Preview lets a page escape the sandbox","description":"Sandbox escape due to use-after-free in the Print Preview component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.","summary":"A use-after-free bug in Firefox's Print Preview component allows content to escape the browser sandbox. Fixed in Firefox 159 and Firefox ESR 115.44 and 153.6.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browsers","desktop","firefox","package"],"not_affected_if":["already-on-fixed-version"],"how_to_check":"- `firefox --version` on desktop installs, compare against `159`, `115.44` or `153.6`\n- Check the Firefox About dialog or enterprise software inventory for the installed build","fix":"- Update Firefox to `159` or to ESR `115.44` or `153.6`, whichever matches the installed branch","status":"open","published_at":"2026-10-27T14:16:55+00:00","first_seen_at":"2026-10-27T14:32:24+00:00","triaged_at":"2026-10-27T14:35:18+00:00","updated_at":"2026-10-27T14:35:18+00:00","category":"package","confidence":0.5,"triage":{"at":"2026-10-27T14:35:18Z","model":"claude-haiku-5-5","output":{"fix":"- Update Firefox to `159` or to ESR `115.44` or `153.6`, whichever matches the installed branch","reach":"internet","title":"Firefox: use-after-free in Print Preview lets a page escape the sandbox","impact":"high","summary":"A use-after-free bug in Firefox's Print Preview component allows content to escape the browser sandbox. Fixed in Firefox 159 and Firefox ESR 115.44 and 153.6.","category":"package","nicknames":[],"who_cares":["firefox","browsers","desktop"],"confidence":0.5,"needs_auth":"no","worst_case":"Attacker code escapes the browser sandbox and runs on the user's machine","analyst_note":"Confirm from the Mozilla security advisory whether exploitation requires Print Preview to be opened and whether it is exploited in the wild.","how_to_check":"- `firefox --version` on desktop installs, compare against `159`, `115.44` or `153.6`\n- Check the Firefox About dialog or enterprise software inventory for the installed build","needs_analyst":true,"not_affected_if":["already-on-fixed-version"],"who_is_affected":"Anyone running Firefox builds older than 159 or ESR builds older than 115.44 and 153.6 is exposed, since the flaw is in the browser itself. Managed fleets and users who browse untrusted pages are the main concern. Systems already on a fixed build can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000592,"input_tokens":3260,"output_tokens":533,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117971':17A,20A '-2026':16A,19A '115.44':51B,76C '153.6':53B,80C '159':47B,73C 'allow':37B 'browser':21B,42B 'bug':30B 'compon':36B,66C 'content':38B 'cve':15A,18A 'desktop':22B 'due':56C 'escap':12A,40B,55C 'esr':50B,75C,79C 'firefox':1A,23B,32B,46B,49B,72C,74C,78C 'fix':44B,70C 'free':5A,29B,61C 'let':9A 'packag':24B 'page':11A 'preview':8A,35B,65C 'print':7A,34B,64C 'sandbox':14A,43B,54C 'use':3A,27B,59C 'use-after-fre':2A,26B,58C 'vulner':68C","nicknames":[],"mitigations":[],"who_affected":"Anyone running Firefox builds older than 159 or ESR builds older than 115.44 and 153.6 is exposed, since the flaw is in the browser itself. Managed fleets and users who browse untrusted pages are the main concern. Systems already on a fixed build can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T14:16:55+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117971","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117971","severity":null,"published_at":"2026-10-27T14:16:55+00:00","modified_at":"2026-10-27T14:16:55+00:00","first_seen_at":"2026-10-27T14:32:24+00:00","fetched_at":"2026-10-27T14:32:24+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}