{"id":"CVE-2026-117977","kind":"vulnerability","aliases":["CVE-2026-117977"],"related":[],"title":"Firefox: Console component flaw fixed in Firefox 159 and ESR 153.6","description":"Other issue in the Console component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.","summary":"A flaw in the Console component of Firefox was fixed in Firefox 159 and Firefox ESR 153.6. The sources do not say what an attacker gains from it.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["desktop-browsers","firefox","other"],"not_affected_if":["already-on-fixed-version"],"how_to_check":"- Check the installed Firefox version in the About Firefox dialog or with `firefox --version`\n- unknown","fix":"- Update Firefox to `159` or later\n- Update Firefox ESR to `153.6` or later","status":"open","published_at":"2026-10-27T14:16:55+00:00","first_seen_at":"2026-10-27T14:32:24+00:00","triaged_at":"2026-10-27T14:35:11+00:00","updated_at":"2026-10-27T14:35:11+00:00","category":"other","confidence":0.3,"triage":{"at":"2026-10-27T14:35:11Z","model":"claude-haiku-5-5","output":{"fix":"- Update Firefox to `159` or later\n- Update Firefox ESR to `153.6` or later","reach":"unknown","title":"Firefox: Console component flaw fixed in Firefox 159 and ESR 153.6","impact":"medium","summary":"A flaw in the Console component of Firefox was fixed in Firefox 159 and Firefox ESR 153.6. The sources do not say what an attacker gains from it.","category":"other","nicknames":[],"who_cares":["firefox","desktop-browsers"],"confidence":0.3,"needs_auth":"unknown","worst_case":"unknown; the sources do not describe the impact","analyst_note":"Find the Mozilla security advisory for the Firefox 159 release notes to learn the impact, trigger and severity of the Console flaw.","how_to_check":"- Check the installed Firefox version in the About Firefox dialog or with `firefox --version`\n- unknown","needs_analyst":true,"not_affected_if":["already-on-fixed-version"],"who_is_affected":"Teams that run Firefox or Firefox ESR on desktops or in managed fleets before the fixed versions are affected. The sources do not say what triggers the flaw or whether it needs a particular setting. unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000556,"input_tokens":3222,"output_tokens":467,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117977':14A,17A '-2026':13A,16A '153.6':11A,38B,64C '159':8A,34B,60C 'attack':46B 'browser':20B 'compon':3A,27B,53C 'consol':2A,26B,52C 'cve':12A,15A 'desktop':19B 'desktop-brows':18B 'esr':10A,37B,63C 'firefox':1A,7A,21B,29B,33B,36B,59C,62C 'fix':5A,31B,57C 'flaw':4A,23B 'gain':47B 'issu':49C 'say':43B 'sourc':40B 'vulner':55C","nicknames":[],"mitigations":[],"who_affected":"Teams that run Firefox or Firefox ESR on desktops or in managed fleets before the fixed versions are affected. The sources do not say what triggers the flaw or whether it needs a particular setting. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T14:16:55+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117977","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117977","severity":null,"published_at":"2026-10-27T14:16:55+00:00","modified_at":"2026-10-27T14:16:55+00:00","first_seen_at":"2026-10-27T14:32:24+00:00","fetched_at":"2026-10-27T14:32:24+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}