Description
Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
Published: 2026-10-27
Score: n/a
EPSS: n/a
KEV: No
Impact: Privilege Escalation
Action: Apply Patch
AI Analysis

Impact

This vulnerability arises from improper boundary checking in the Networking component, allowing malicious inputs to elevate privileges. An attacker who successfully exploits the flaw could gain higher-level access than intended, potentially compromising system integrity and confidentiality. The weakness is an example of improper input validation leading to unauthorized privilege escalation.

Affected Systems

Mozilla’s Firefox browser is impacted, specifically versions before 159, before ESR 115.44, and before ESR 153.6. These releases include the networking implementation that contains the unchecked boundary conditions.

Risk and Exploitability

The lack of an EPSS score and KEV listing makes the current exploitation probability uncertain, but the vulnerability permits privilege escalation, indicating a high potential impact. Attackers would likely need to send crafted data to the affected Firefox instance, inferring a network-based vector. Given the absence of publicly listed exploit data, mitigation through patching remains the primary defense.

Generated by OpenCVE AI on October 27, 2026 at 15:25 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Firefox to version 159 or newer, or to ESR 115.44 or 153.6 to include the fixed networking code.
  • If an upgrade is not possible, shift to a more recent ESR build before 115.44 or after 153.6 that contains the patch
  • Maintain an update schedule that keeps the browser and system components current with Mozilla’s security advisories

Generated by OpenCVE AI on October 27, 2026 at 15:25 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 27 Oct 2026 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Mozilla
Mozilla firefox
Vendors & Products Mozilla
Mozilla firefox

Tue, 27 Oct 2026 15:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-193
CWE-20

Tue, 27 Oct 2026 14:15:00 +0000

Type Values Removed Values Added
Description Privilege escalation due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
Title Privilege escalation due to incorrect boundary conditions in the Networking component
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published:

Updated: 2026-10-27T14:05:02.811Z

Reserved: 2026-10-27T14:05:02.618Z

Link: CVE-2026-117862

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-10-27T14:16:40.577

Modified: 2026-10-27T15:00:49.240

Link: CVE-2026-117862

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-27T16:00:06Z

Weaknesses