
Mozilla released Firefox 159 and security advisories for ESR 153.6 and 115.44. Fixes include CVE-2026-117861 (sandbox escape), CVE-2026-117860 (same-origin policy bypass), privilege-escalation bugs and numerous memory-safety flaws affecting browser security boundaries. https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/

