CVE-2026-109774 is a critical vulnerability in the DOM Notifications component of Firefox that involves an invalid pointer leading to undefined behavior. This flaw could allow an attacker to cause significant impact including confidentiality, integrity, and availability breaches. The issue was fixed in Firefox version 158.