8.8
High
CVE-2026-16371 Privilege escalation in the DOM: Navigation component
Description
Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, Thunderbird 140.13, Firefox ESR 140.15, and Thunderbird 140.15.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 153 | earliest → < 153 | 153 |
| Firefox 140.15 | earliest → < 140.15 | 140.15 |
| Firefox 140.13 | earliest → < 140.13 | 140.13 |
| Thunderbird 153 | earliest → < 153 | 153 |
| Thunderbird 140.15 | earliest → < 140.15 | 140.15 |
| Thunderbird 140.13 | earliest → < 140.13 | 140.13 |