{"id":"CVE-2026-117981","kind":"vulnerability","aliases":["CVE-2026-117981"],"related":[],"title":"Firefox: Toolkit flaw lets attackers escalate privileges, fixed in 159","description":"Privilege escalation in the Toolkit component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.","summary":"A flaw in the Firefox Toolkit component allows privilege escalation. Mozilla fixed it in Firefox 159 and Firefox ESR 153.6, and the sources do not say what an attacker gets beyond that.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["desktop","firefox","managed-fleet","other"],"not_affected_if":[],"how_to_check":"- Run `firefox --version` or open Help > About Firefox and compare against `159` or `153.6`\n- unknown for anything beyond the version check, as the sources do not say what else to look at","fix":"- Update Firefox to `159` or Firefox ESR to `153.6`\n- unknown for any other action, as the sources do not say","status":"open","published_at":"2026-10-27T14:16:56+00:00","first_seen_at":"2026-10-27T14:32:24+00:00","triaged_at":"2026-10-27T14:35:07+00:00","updated_at":"2026-10-27T14:35:07+00:00","category":"other","confidence":0.35,"triage":{"at":"2026-10-27T14:35:07Z","model":"claude-haiku-5-5","output":{"fix":"- Update Firefox to `159` or Firefox ESR to `153.6`\n- unknown for any other action, as the sources do not say","reach":"unknown","title":"Firefox: Toolkit flaw lets attackers escalate privileges, fixed in 159","impact":"medium","summary":"A flaw in the Firefox Toolkit component allows privilege escalation. Mozilla fixed it in Firefox 159 and Firefox ESR 153.6, and the sources do not say what an attacker gets beyond that.","category":"other","nicknames":[],"who_cares":["firefox","desktop","managed-fleet"],"confidence":0.35,"needs_auth":"unknown","worst_case":"unknown; sources only say privilege escalation","analyst_note":"Check the Mozilla security advisory for the Firefox 159 release notes and the NVD entry for the attack vector, CVSS and whether it is exploited in the wild.","how_to_check":"- Run `firefox --version` or open Help > About Firefox and compare against `159` or `153.6`\n- unknown for anything beyond the version check, as the sources do not say what else to look at","needs_analyst":true,"not_affected_if":[],"who_is_affected":"Teams that run Firefox or Firefox ESR on desktops or managed fleets are affected on versions before the fixed releases. The sources do not say which configurations or sites trigger the flaw. unknown for who can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000588,"input_tokens":3234,"output_tokens":529,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117981':13A,16A '-2026':12A,15A '153.6':41B,69C '159':10A,37B,65C 'allow':29B 'attack':5A,50B 'beyond':52B 'compon':28B,58C 'cve':11A,14A 'desktop':17B 'escal':6A,31B,54C 'esr':40B,68C 'firefox':1A,18B,26B,36B,39B,64C,67C 'fix':8A,33B,62C 'flaw':3A,23B 'fleet':21B 'get':51B 'let':4A 'manag':20B 'managed-fleet':19B 'mozilla':32B 'privileg':7A,30B,53C 'say':47B 'sourc':44B 'toolkit':2A,27B,57C 'vulner':60C","nicknames":[],"mitigations":[],"who_affected":"Teams that run Firefox or Firefox ESR on desktops or managed fleets are affected on versions before the fixed releases. The sources do not say which configurations or sites trigger the flaw. unknown for who can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T14:16:56+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117981","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117981","severity":null,"published_at":"2026-10-27T14:16:56+00:00","modified_at":"2026-10-27T14:16:56+00:00","first_seen_at":"2026-10-27T14:32:24+00:00","fetched_at":"2026-10-27T14:32:24+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}