Findings

CVE-2026-109743

Privilege escalation in the Panning and Zooming component.

Published Oct 13, 2026 · updated Oct 14, 2026

Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 13, 2026 · NIST NVD

    Detected

    Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Sources

  • CVE.orgCVE-2026-109743

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2026-109743

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDCVE-2026-109743

    Privilege escalation in the Panning and Zooming component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

    nvd.nist.gov

References

CVE-2026-109743 · ZeroDay Findings