Information disclosure in the CSS Parsing and Computation component
CVE-2026-117992

Currently unrated

Key Information:

Vendor

Mozilla
Status
Firefox
Vendor
CVE Published:
27 October 2026

What is CVE-2026-117992?

Information disclosure in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.

Affected Version(s)

Firefox 115.44

Firefox 153.6

Firefox 159

References

https://bugzilla.mozilla.org/show_bug.cgi?id=2079709
https://www.mozilla.org/security/advisories/mfsa2026-118/
https://www.mozilla.org/security/advisories/mfsa2026-119/

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Takashi Suzuki
.