← Back to CVE Explorer

CVE-2026-117864

Full vulnerability record from the local CVENow database.

Description

Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.

Severity
Not scored
CVSS score
Not available
Vulnerability status
Deferred
Source identifier
Published
2026-10-27 14:16:40.783000
Last modified
2026-10-27 19:17:11.660000
View original CVE JSON
{
  "id": "CVE-2026-117864",
  "sourceIdentifier": "[email protected]",
  "published": "2026-10-27T14:16:40.783",
  "lastModified": "2026-10-27T19:17:11.660",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Sandbox escape in the Form Manager component. This vulnerability was fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Mozilla",
          "product": "Firefox",
          "versions": [
            {
              "version": "153.6",
              "lessThanOrEqual": "153.*",
              "versionType": "rpm",
              "status": "unaffected"
            },
            {
              "version": "159",
              "lessThanOrEqual": "*",
              "versionType": "rpm",
              "status": "unaffected"
            }
          ]
        },
        {
          "vendor": "Mozilla",
          "product": "Thunderbird",
          "versions": [
            {
              "version": "153.6",
              "lessThanOrEqual": "153.*",
              "versionType": "rpm",
              "status": "unaffected"
            },
            {
              "version": "159",
              "lessThanOrEqual": "*",
              "versionType": "rpm",
              "status": "unaffected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {},
  "references": [
    {
      "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2058614",
      "source": "[email protected]"
    },
    {
      "url": "https://www.mozilla.org/security/advisories/mfsa2026-118/",
      "source": "[email protected]"
    },
    {
      "url": "https://www.mozilla.org/security/advisories/mfsa2026-120/",
      "source": "[email protected]"
    },
    {
      "url": "https://www.mozilla.org/security/advisories/mfsa2026-121/",
      "source": "[email protected]"
    },
    {
      "url": "https://www.mozilla.org/security/advisories/mfsa2026-122/",
      "source": "[email protected]"
    }
  ]
}