CVE-2026-117956 is a vulnerability involving an invalid pointer in the Nimbus Desktop Client component of Firefox. This issue was addressed and fixed in Firefox version 159 and Firefox ESR 153.6. The vulnerability is classified with high impact by the vendor.