CVE-2026-118027
published 2026-10-27CVE-2026-118027: Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
PriorityP424
EPSS
0.13%
2.8th percentile
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mozilla | firefox_esr | < Firefox ESR 115.44 | Firefox ESR 115.44 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Mozilla
Mozilla Foundation Security Advisory 2026-119: CVE-2026-118027
vendor_mozilla
CVE-2026-118027 Mozilla Foundation Security Advisory 2026-119: CVE-2026-118027
Mozilla Foundation Security Advisory 2026-119
CVE: CVE-2026-118027
Product: Firefox ESR
Impact: low
Fixed in: Firefox ESR 115.44
GHSA
Frame poisoning in the Layout component.
ghsa_unreviewed·2026-10-27
CVE-2026-118027 Frame poisoning in the Layout component.
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-10-27
Published