CVE-2026-118027 Frame poisoning in the Layout component
CriticalCVSS 9.1
EPSS 0.26%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/mozjs102(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/mozjs78(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/mozjs91(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/thunderbird(Ubuntu:22.04) | All versions | No fix listed |
| ubuntu/mozjs102(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/mozjs115(Ubuntu:24.04) | All versions | No fix listed |
References
- Red Hat CVE page vendor-advisory
- Red Hat Bugzilla 2562158 issue-tracking
- www.cve.org
- nvd.nist.gov
- www.mozilla.org
- bugzilla.mozilla.org
- Ubuntu CVE tracker vendor-advisory
- Debian Security Tracker CVE-2026-118027 vendor-advisory