CVE-2026-117945 is a vulnerability involving incorrect boundary conditions in the XML component of Mozilla products. This flaw was addressed and fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6. The vulnerability is considered high impact by Mozilla. No known exploits in the wild have been reported.