Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability in the DOM Component

A sandbox escape vulnerability has been identified in Mozilla Firefox and Thunderbird due to incorrect boundary conditions in the DOM: Core & HTML component. This issue affects Firefox versions prior to 148, Firefox ESR versions prior to 115.33 and 140.8, as well as Thunderbird versions prior to 148 and 140.8.

Impact

Exploitation of this vulnerability allows for a sandbox escape, potentially leading to unauthorized access or actions outside of the intended security boundaries.

Remediation

Users can upgrade to Firefox 148, Firefox ESR 140.8, or Thunderbird 148 to address this vulnerability. Instructions for updating can be found on the Mozilla website.