Mozilla Firefox and Firefox ESR Sandbox Escape Vulnerability in the Telemetry Component

A sandbox escape vulnerability has been identified in Mozilla Firefox versions prior to 149, as well as in Firefox ESR versions prior to 115.34 and prior to 140.9. This vulnerability arises from incorrect boundary conditions in the Telemetry component, which could potentially be exploited to escape the browser's sandbox environment.

Impact

Exploitation of this vulnerability leads to a sandbox escape, allowing potentially malicious code to break out of the browser's restricted environment and execute with greater privileges.

Remediation

Users can upgrade to Firefox 149 or Firefox ESR 115.34 or 140.9 to address this vulnerability.