Mozilla Firefox and Firefox ESR Sandbox Escape Vulnerability via Use-After-Free in Disability Access APIs

A sandbox escape vulnerability has been identified in Mozilla Firefox versions prior to 149 and in Firefox ESR versions prior to 140.9. This vulnerability arises from a use-after-free issue in the Disability Access APIs component, which could potentially be exploited to escape the browser's sandbox restrictions.

Impact

Exploitation of this vulnerability allows for a sandbox escape, enabling potentially malicious code to execute outside of the browser's protected environment.

Remediation

Users can upgrade to Firefox 149 or Firefox ESR 140.9 to address this vulnerability.