{"affected":[{"product":"Firefox","source":"CNA: mozilla","vendor":"Mozilla","versions":[{"lessThanOrEqual":"*","status":"unaffected","version":"115.44","versionType":"rpm"}]}],"cveId":"CVE-2026-118027","cwes":["CWE-451"],"description":"Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.","epss":{"date":"2026-11-04","percentile":0.02852,"score":0.00133},"exploits":[],"kev":null,"metrics":[{"score":9.1,"severity":"critical","source":"ADP: CISA-ADP","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","version":"3.1"}],"modifiedAt":1793825712108,"publishedAt":1793109966303,"references":[{"source":"CNA: mozilla","tags":[],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=2045606"},{"source":"CNA: mozilla","tags":[],"url":"https://www.mozilla.org/security/advisories/mfsa2026-119/"}],"remediation":[],"revision":"7f6c78cf92abcf46dbd52aaf7aeeb20e2c07ce448cf4499031aa3f4b41e52fb1","sources":[{"modifiedAt":1793825712108,"name":"CNA: mozilla","retrievedAt":1793826640051,"url":"https://www.cve.org/CVERecord?id=CVE-2026-118027"},{"modifiedAt":null,"name":"FIRST EPSS","retrievedAt":1793826646578,"url":"https://api.first.org/data/v1/epss?cve=CVE-2026-118027"}],"ssvc":{"assessedAt":1793825662394,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Frame poisoning in the Layout component","updatedAt":1793826646578}