CVE-2026-117928 is a same-origin policy bypass vulnerability in the CSS Parsing and Computation component of Firefox. This security flaw could allow an attacker to bypass the browser's same-origin policy, potentially leading to unauthorized access to sensitive information across origins. The issue was addressed and fixed in Firefox version 159 and Firefox ESR 153.6.