CVE-2026-117990 is a high-impact vulnerability in the Graphics: WebRender component of Mozilla Firefox and Thunderbird. It allows sandbox escape due to incorrect boundary conditions. This flaw was addressed and fixed in Firefox 159, Firefox ESR 153.6, Thunderbird 159, and Thunderbird 153.6.