CVE-2026-118027 Details
Description
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
A use-after-free vulnerability has been identified in the Layout component of Mozilla Firefox and Firefox ESR. This issue arises from frame poisoning, where an out-of-flow frame is destroyed while still being referenced by an iterator, leading to the potential for exploitation. The vulnerability is present in Firefox versions 115.0 through 115.43 and 117.0 through 154.0, as well as in Firefox ESR versions 115.0 through 115.43. The vulnerability can be exploited by manipulating the content-visibility property of elements, causing a reflow that disrupts the normal frame handling process.
Users can upgrade to Firefox ESR 115.44 or the latest version of Firefox to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 27, 2026CISA-ADP
Assessed Nov 4, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=2045606 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://www.mozilla.org/security/advisories/mfsa2026-119/ | [email protected] | AdvisoryBundleRemedyVendor |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-451 | User Interface (UI) Misrepresentation of Critical Information | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| Mozilla Firefox ESR | All versions |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 4, 2026 | CVE Modified | CISA-ADP |
| Oct 27, 2026 | New CVE Received | [email protected] |