PT-2026-126578

CVE-2026-117995

Published

2026-10-27

Updated

2026-11-09

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 159 Firefox ESR versions prior to 153.6 Thunderbird versions prior to 159 Thunderbird versions prior to 153.6

Description Privilege escalation exists within the DOM: UI Events & Focus Handling component.

Recommendations Update Firefox to version 159. Update Firefox ESR to version 153.6. Update Thunderbird to version 159. Update Thunderbird to version 153.6.

Exploitability

Fix

Impacts

Researchers

Haruka Yamazaki

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control

Related identifiers

CVE-2026-117995

OESA-2026-4675