VulnerabilityDeferred
CVE-2026-117992
Information disclosure in the CSS Parsing and Computation component.
UnscoredEPSS —
Does this matter?
Not yet scored. NVD analysis is pending; check back once CVSS and EPSS values are published.
Description
Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
- CVSS
- Not yet scored
- EPSS
- No score yet
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Source
- security@mozilla.org
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=2079709
- https://www.mozilla.org/security/advisories/mfsa2026-118/
- https://www.mozilla.org/security/advisories/mfsa2026-119/
- https://www.mozilla.org/security/advisories/mfsa2026-120/
- https://www.mozilla.org/security/advisories/mfsa2026-121/
- https://www.mozilla.org/security/advisories/mfsa2026-122/
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.