Live › vulnerability › CVE-2026-118027
Go to dashboardA frame poisoning flaw in the Layout component of Firefox ESR is described in the sources, which give no further technical detail. The sources do not say what an attacker gains from it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 14:32 UTC. All times on this page are UTC.
Teams running Firefox ESR 115 builds earlier than 115.44 on workstations or managed desktops are the ones the advisory points at. The sources do not say which configurations or usage patterns are required for exploitation.
No product ranges from the sources yet.
firefox --version or check Help > About Firefox and compare against the ESR 115 line115.44 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
This page as .md · .json · in your agent: get_signal("CVE-2026-118027")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.