Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability in the Telemetry Component

A sandbox escape vulnerability has been identified in the Telemetry component of Mozilla Firefox and Thunderbird. This issue arises from incorrect boundary conditions, allowing for potential unauthorized access or actions within the application's sandbox environment. The vulnerability affects multiple versions of Firefox and Thunderbird, including Firefox versions prior to 148, Firefox ESR versions prior to 115.33 and 140.8, as well as Thunderbird versions prior to 148 and 140.8.

Impact

Exploitation of this vulnerability leads to a sandbox escape, allowing potentially unauthorized actions or access within the application's sandbox environment.

Remediation

Users can upgrade to Firefox 148, Firefox ESR 140.8, or Thunderbird 148 to address this vulnerability.