CVE-2026-109743

Summary

This vulnerability allows attackers with limited privileges to escalate their access within the Panning and Zooming component, potentially leading to full system compromise. The flaw stems from improper privilege checks in how the component handles user interactions.

Exploitability

Exploitation requires a user to interact with the affected component, but is relatively straightforward once a user session is established, as it leverages existing user privileges to gain elevated access.

Blast radius

If exploited, this vulnerability could affect a wide range of users running vulnerable versions of Firefox or Thunderbird, particularly those who frequently use web-based applications that rely on panning and zooming functionality.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Firefox 158 or Thunderbird 158 to remediate this privilege escalation vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.