CVE-2026-16366 is a high-impact privilege escalation vulnerability in the DOM Navigation component of Firefox and Thunderbird. This flaw allows an attacker to escalate privileges within the affected applications. The vulnerability was fixed in Firefox 153 and Thunderbird 153.