CVE-2026-109704

Summary

This vulnerability allows attackers with limited privileges to escalate their access within the Application Update component, potentially gaining full system control. The flaw stems from improper privilege handling in how updates are processed.

Exploitability

Exploitation requires a user with low privileges to interact with the update process, making it moderately difficult but not impossible to achieve privilege escalation.

Blast radius

If exploited, this vulnerability could allow attackers to gain full system access through the update mechanism, affecting all users running vulnerable versions of Firefox or Thunderbird.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Firefox 158 or Thunderbird 158 to remediate this privilege escalation vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.