8.8
High
CVE-2026-16365 Privilege escalation in the DOM: Workers component
Description
Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153, Thunderbird 153, Firefox ESR 140.15, and Thunderbird 140.15.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 153 | earliest → < 153 | 153 |
| Firefox 140.15 | earliest → < 140.15 | 140.15 |
| Thunderbird 153 | earliest → < 153 | 153 |
| Thunderbird 140.15 | earliest → < 140.15 | 140.15 |