CVE-2026-117889 in Firefox

Sumário

de MITRE • 27/10/2026

Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsável: Mozilla
• Reservar: 27/10/2026
• Divulgação: 27/10/2026
• Moderação: aceite
• Entrada: VDB-427257
• CPE: 20261027
• CWE: CWE-125 (confirmado)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: não
• Atividades: muito baixo
• Sector: Transportation, Insurance, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-117889
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-117889
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-117889/