Live › vulnerability › CVE-2026-118008
Go to dashboardA flaw in the DOM Navigation component of Firefox lets a page or script gain privileges it should not have. The sources do not describe the exact exploit path or the scope of the privileges gained.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams that run Firefox builds older than version 159, including desktop installs and any managed fleet pinned to older releases. The sources do not say which platforms or configurations are most exposed. Teams already on Firefox 159 or later are not affected.
No product ranges from the sources yet.
firefox --version or Help > About Firefox159 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 159.
This page as .md · .json · in your agent: get_signal("CVE-2026-118008")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.