Privilege escalation in the Application Update component. This vulnerability was fixed in Firefox 151 and Thunderbird 151.