Mozilla Firefox and Thunderbird Mitigation Bypass Vulnerability in the DOM: HTML Parser Component

A mitigation bypass vulnerability has been identified in the DOM: HTML Parser component, affecting multiple versions of Firefox and Thunderbird. Specifically, this vulnerability impacts Firefox versions prior to 148, Firefox ESR versions prior to 115.33 and 140.8, as well as Thunderbird versions prior to 148 and 140.8. The vulnerability arises from a bypass of existing mitigations, which could potentially be exploited in certain contexts.

Impact

Exploitation of this vulnerability could lead to a bypass of security mitigations, potentially allowing for the exploitation of other vulnerabilities or the introduction of security risks.

Remediation

Users can upgrade to Firefox 148, Firefox ESR 140.8, or Thunderbird 148 to address this vulnerability.