CVE-2026-109704
HIGH NVDCVSS Score
8.8
Severity
HIGH
Source
NVD
Published
Oct 13, 2026
Description
Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.