Critical · 9.1 CVE-2026-118027 EUVD-2026-110925GHSA-38v7-8p8g-jfff

Frame poisoning in the Layout component

Published Oct 27, 2026 · Updated Nov 4, 2026 · Assigned by mozilla

Vendor: Mozilla Product: Firefox Package: mozjs102 Package: mozjs115 Package: mozjs38 Package: mozjs52 Package: mozjs68 Package: mozjs78 Package: mozjs91 Package: thunderbird Category: Browsers Ecosystem: Ubuntu

Description

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.

Affected products

Vendor	Product	Affected	Fixed
Mozilla	Firefox	—	115.44

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗

Release	Package	Fixed in	Advisory
Ubuntu 24.04 LTS	mozjs102 +1	No fix yet	—
Ubuntu 22.04 LTS	mozjs78 +3	No fix yet	—
Ubuntu 20.04 LTS	mozjs52 +1	No fix yet	—
Ubuntu 18.04 LTS	mozjs38 +1	No fix yet	—

Advisories 1

WID-SEC-2026-4216 Mozilla Firefox, Firefox ESR, und Thunderbird: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 12, 2026