Description
Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
Published: 2026-10-27
Score: n/a
EPSS: n/a
KEV: No
Impact: Undefined behavior
Action: Apply Patch
AI Analysis

Impact

The vulnerability involves incorrect boundary checks in the Layout: Tables component, which can lead to undefined behavior when rendering malformed table structures. The weakness corresponds to improper boundary checks (CWE-119).

Affected Systems

Affected product: Mozilla Firefox. Versions before 159, and ESR versions older than 115.44 and 153.6 contain the vulnerable code. The issue resides in the table rendering path of the browser’s layout engine.

Risk and Exploitability

No CVSS score or EPSS value is supplied, and the vulnerability is not listed in the CISA KEV catalog, so the public exploitation likelihood is uncertain. The attack vector would involve delivering malicious HTML containing specially crafted table structures to a vulnerable browser. At this time no public exploit is documented, but the lack of a security update means the potential risk remains for systems running affected versions.

Generated by OpenCVE AI on October 27, 2026 at 19:34 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Firefox to version 159 or newer, or to ESR 115.44 or ESR 153.6 where applicable.
  • Enable automatic browser updates to receive future security patches promptly.
  • Where update is delayed, restrict or sanitize table elements in externally loaded web pages to reduce exposure until the patch is applied.

Generated by OpenCVE AI on October 27, 2026 at 19:34 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 27 Oct 2026 19:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119

Tue, 27 Oct 2026 18:45:00 +0000

Type Values Removed Values Added
Description Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, and Thunderbird 159. Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.
References

Tue, 27 Oct 2026 18:30:00 +0000

Type Values Removed Values Added
Description Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6. Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, Firefox ESR 153.6, and Thunderbird 159.
References

Tue, 27 Oct 2026 16:00:00 +0000

Type Values Removed Values Added
First Time appeared Mozilla
Mozilla firefox
Vendors & Products Mozilla
Mozilla firefox

Tue, 27 Oct 2026 14:15:00 +0000

Type Values Removed Values Added
Description Incorrect boundary conditions in the Layout: Tables component. This vulnerability was fixed in Firefox 159, Firefox ESR 115.44, and Firefox ESR 153.6.
Title Incorrect boundary conditions in the Layout: Tables component
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mozilla

Published:

Updated: 2026-10-27T18:28:34.902Z

Reserved: 2026-10-27T14:05:15.905Z

Link: CVE-2026-117897

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-10-27T14:16:45.137

Modified: 2026-10-27T19:17:14.963

Link: CVE-2026-117897

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-27T19:45:07Z

Weaknesses
  • CWE-119

    Improper Restriction of Operations within the Bounds of a Memory Buffer