Live › vulnerability › CVE-2026-117975
Go to dashboardA flaw in the WebRender graphics component of Firefox uses an invalid pointer, which allows a sandbox escape. The sources say it was fixed in Firefox 159 and Firefox ESR 153.6.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox or Firefox ESR builds older than the fixed versions, on desktop or in managed deployments. The sources do not say which platforms or configurations are most exposed, so unknown whether a default install is affected beyond the version check.
No product ranges from the sources yet.
firefox --version or check Help > About Firefox and compare with 159 or 153.6159 or later153.6 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Sandbox escape due to invalid pointer in the Graphics: WebRender component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117975")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.