Live › vulnerability › CVE-2026-117998
Go to dashboardFirefox's DOM Push Subscriptions component had a flaw that let a mitigation be bypassed, according to the NVD description. The sources do not say what an attacker gains beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Anyone running Firefox builds older than 159 or Firefox ESR builds older than 153.6. The sources do not describe any extra configuration or role that changes exposure.
No product ranges from the sources yet.
firefox --version or check About Firefox and compare against the fixed releases.159 or Firefox ESR to 153.6.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Mitigation bypass in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 159 and Firefox ESR 153.6.
This page as .md · .json · in your agent: get_signal("CVE-2026-117998")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.