CVE-2026-109756

Summary

A privilege escalation vulnerability in Firefox's DOM Navigation component allows attackers to gain elevated privileges by manipulating navigation behavior, potentially leading to full system compromise.

Exploitability

Exploitation requires a user to visit a malicious website with a crafted navigation sequence, making it moderately difficult but achievable through social engineering or drive-by attacks.

Blast radius

The vulnerability affects all users running Firefox versions prior to 158 or Firefox ESR 153.5, potentially impacting millions of users who may be tricked into visiting compromised sites.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to Firefox 158 or Firefox ESR 153.5 immediately, as these versions contain the necessary patches for this privilege escalation vulnerability.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.