CVE-2026-118011: Frame poisoning in the CSS Parsing and… – CVSS 8.8 · Watchpost