CVE-2026-16370 is a mitigation bypass vulnerability in the DOM: Networking component of Mozilla Firefox. This vulnerability was addressed and fixed in Firefox version 153. The CVSS 3.1 base score is 9.1 (critical), with attack vector network, low attack complexity, no privileges required, no user interaction, and impacts confidentiality and integrity but not availability. The vendor advisory confirms the fix was implemented in Firefox 153. The vulnerability allows bypassing security mitigations in the networking component of the DOM, potentially enabling unauthorized access or manipulation of data handled by the browser's networking stack.

The vulnerability allows an attacker to bypass mitigation controls in the DOM networking component, which could lead to unauthorized disclosure or modification of sensitive information within the browser context. The CVSS score of 9.1 reflects a critical impact on confidentiality and integrity. There are no known exploits in the wild at the time of publication. The vulnerability affects Firefox prior to version 153.

Mozilla has released an official fix for this vulnerability in Firefox version 153. Users and administrators should update affected Firefox installations to version 153 or later to remediate this issue. Since this is not a cloud service, remediation depends on applying the update. No additional mitigations are specified by the vendor advisory.