Live › vulnerability › CVE-2026-117996
Go to dashboardFirefox's WebRTC component mishandles boundary conditions, a memory-safety class of bug. The sources do not say what an attacker gets beyond that, so impact is unconfirmed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Users of Firefox builds older than version 159 and Firefox ESR builds older than 153.6 are likely exposed, since WebRTC is enabled by default in Firefox. The sources do not say whether specific configurations or sites are required to trigger it. Teams that manage Firefox through a fixed, pinned ESR build should check whether they are on an unpatched point release.
No product ranges from the sources yet.
about:support or the Help menu159 or Firefox ESR 153.6159 or later153.6 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Incorrect boundary conditions in the WebRTC component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117996")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.