Frame poisoning in the Layout component allows an attacker to inject or masquerade frames within a web page, making malicious content appear legitimate. The flaw originates from insufficient validation of frame URLs, permitting arbitrary frames to be embedded. This can facilitate phishing or deceptive content injection, potentially leading to credential theft or data exfiltration if users interact with the baited frames.

Mozilla Firefox and Thunderbird are affected. Versions of Firefox below 158 (non‑ESR) and all ESR builds prior to 153.5 lack the fix; the same applies to Thunderbird, which requires at least version 158 or ESR 153.5.

The CVSS score is 8.1, indicating high severity. The EPSS score is 0.00159 (<1%) and the vulnerability is not listed in CISA’s KEV catalog, indicating that no widespread, publicly tracked exploits are known yet. However, because the weakness permits arbitrary frame injection, it could be leveraged for phishing or social‑engineering attacks against users who visit untrusted web content. The risk is moderate until an exploit emerges, and the vendor’s update should be applied as the most effective mitigation. The likely attack vector involves a malicious web page loading a corrupted frame URL, but this route is inferred the description rather than explicitly documented.