UBUNTU-CVE-2026-118027: Medium severity ubuntu/mozjs52 vulnerability
Published Nov 3, 2026
·Updated
Frame poisoning in the Layout component. This vulnerability was fixed in Firefox ESR 115.44.
Affected Software
10 affected components
ubuntu/mozjs52*
ubuntu/mozjs38*
ubuntu/mozjs68*
ubuntu/mozjs52*
ubuntu/mozjs102*
ubuntu/mozjs78*
ubuntu/mozjs91*
ubuntu/thunderbird*
ubuntu/mozjs102*
ubuntu/mozjs115*
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefox ESRto a version that resolves this vulnerability.Fixed in 115.44
Event History
Nov 3, 2026
CVE Published
via OSV·12:00 AM
Data Sourced
via OSV·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which Ubuntu packages are identified as potentially affected?
The listed packages are ubuntu/mozjs38, ubuntu/mozjs52, ubuntu/mozjs68, ubuntu/mozjs78, ubuntu/mozjs91, ubuntu/mozjs102, ubuntu/mozjs115, and ubuntu/thunderbird.
2
What fixed version is identified?
The vulnerability was fixed in Firefox ESR 115.44. The provided data does not identify corresponding fixed package versions for the listed Ubuntu packages.