Information Disclosure and Privilege Escalation in Mozilla Firefox Security Components

CVE-2026-109709

What is CVE-2026-109709?

The vulnerability in Mozilla Firefox's Security: Process Sandboxing component allows for unauthorized access to sensitive information, potentially leading to privilege escalation. This issue can expose user data or application functionality that should be restricted, impacting the overall security posture of affected Firefox versions. The flaw has been addressed in updates, specifically Firefox 158 and Firefox ESR 153.5, which contain patches to mitigate the risk of exploitation.

References