VulnerabilityDeferred
CVE-2026-117889
This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
UnscoredEPSS —
Does this matter?
Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.
Description
Incorrect boundary conditions in the JavaScript Engine component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
- CVSS
- Not yet scored
- EPSS
- No score yet
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Source
- security@mozilla.org
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=2078727
- https://www.mozilla.org/security/advisories/mfsa2026-118/
- https://www.mozilla.org/security/advisories/mfsa2026-119/
- https://www.mozilla.org/security/advisories/mfsa2026-120/
- https://www.mozilla.org/security/advisories/mfsa2026-121/
- https://www.mozilla.org/security/advisories/mfsa2026-122/
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.