CVE-2026-117861

LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

0.0/ 10 priority

Sources & remediation

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-10-27: 210-27
Referenced assets1 URL
By indicator
Full discourse2 posts
  • The Hacker News@TheHackersNews

    Mozilla released Firefox 159 and security advisories for ESR 153.6 and 115.44. Fixes include CVE-2026-117861 (sandbox escape), CVE-2026-117860 (same-origin policy bypass), privilege-escalation bugs and numerous memory-safety flaws affecting browser security boundaries. https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/

    124832133122.1K
    2.5M followersView on X
  • Mike Kipruto@itsMikeKipruto

    Mozilla has released Firefox 159, addressing numerous security vulnerabilities rated high impact. The fixes include: • CVE-2026-117861: Sandbox escape • CVE-2026-117860: Same-origin policy bypass • Privilege escalation flaws • Numerous memory-safety bugs These affect critical browser security boundaries. Review the advisory: https://www.mozilla.org/en-US/security/advisories/mfsa2026-118/

    04085763
    5.0K followersView on X

Explore more