Live › vulnerability › CVE-2026-117978
Go to dashboardFirefox's Graphics component has an incorrect boundary condition, a memory-handling flaw that the sources do not describe in further detail. The fix ships in Firefox 159, Firefox ESR 115.44 and Firefox ESR 153.6, and the sources do not state what an attacker can gain from it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox or Firefox ESR builds older than the fixed versions on desktop or managed endpoints. The sources do not say whether the flaw needs a specific page, feature or setting to trigger, so unknown.
No product ranges from the sources yet.
firefox --version or open Help > About Firefox and compare against 159, 115.44 or 153.6 (ESR)159 or later115.44 or 153.6Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect boundary conditions in the Graphics component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117978")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.