---
id: "CVE-2026-118027"
kind: "vulnerability"
aliases: ["CVE-2026-118027"]
title: "Firefox: Layout frame poisoning flaw, fixed in ESR 115.44"
severity: "unknown"
cvss: null
epss: null
exploited: false
status: "open"
category: "other"
products: []
ecosystems: []
tags: ["desktop", "firefox", "firefox-esr", "other"]
not_affected_if: []
published_at: "2026-10-27T14:17:00+00:00"
first_seen_at: "2026-10-27T14:32:25+00:00"
updated_at: "2026-10-27T14:33:18+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-118027", "first_seen_at": "2026-10-27T14:32:25+00:00"}]
---

# Firefox: Layout frame poisoning flaw, fixed in ESR 115.44

A frame poisoning flaw in the Layout component of Firefox ESR is described in the sources, which give no further technical detail. The sources do not say what an attacker gains from it.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Run `firefox --version` or check Help > About Firefox and compare against the ESR 115 line
- unknown

## Fix

- Update Firefox ESR to `115.44` or later
- unknown

## Timeline

- 2026-10-27T14:32:25+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-118027

## From the sources

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_