Mozilla Firefox and Thunderbird WebRender Component Sandbox Escape Vulnerability

A sandbox escape vulnerability has been identified in the WebRender component of Mozilla Firefox and Thunderbird. This issue arises from incorrect boundary conditions, allowing for potential unauthorized access or actions within the application sandbox. The vulnerability affects multiple versions of Firefox and Thunderbird, including Firefox versions prior to 148, Firefox ESR versions prior to 115.33 and 140.8, as well as Thunderbird versions prior to 148 and 140.8.

Impact

Exploitation of this vulnerability leads to a sandbox escape, allowing potentially malicious actions or access to resources that are normally restricted within the application sandbox.

Remediation

Users can upgrade to Firefox 148 or Thunderbird 148. For Firefox ESR users, version 140.8 is available. Instructions for updating can be found in the Firefox Release Notes and the Thunderbird Release Notes.