Live › vulnerability › CVE-2026-117991
Go to dashboardFirefox's Layout: Text and Fonts component has an incorrect boundary condition, a memory-safety-style bug whose exact effect the sources do not describe. The fix shipped in Firefox 159 and Firefox ESR 153.6.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox or Firefox ESR older than the fixed versions, on desktop or wherever the browser is deployed. The sources do not say which page content or configurations trigger the bug, so unknown whether a default install is exposed to web content. Teams that do not run Firefox can skip it.
No product ranges from the sources yet.
firefox --version (or check About Firefox) and compare against 159 and ESR 153.6159 or later153.6 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect boundary conditions in the Layout: Text and Fonts component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117991")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.