CVE-2026-16372 is a privilege escalation vulnerability in the DOM: Content Processes component of Firefox and Thunderbird. This issue allows an attacker to gain elevated privileges within the affected component. The vulnerability was fixed in Firefox 153 and Thunderbird 153. The severity of this vulnerability is assessed as high.