Mozilla Firefox and Firefox ESR Widget Win32 Component Sandbox Escape Vulnerability

A sandbox escape vulnerability has been identified in the Widget: Win32 component of Mozilla Firefox. This issue arises from incorrect boundary conditions, allowing for unauthorized access or actions within the application's sandbox environment. The vulnerability affects Firefox versions prior to 151 and Firefox ESR versions prior to 140.11.

Impact

Exploitation of this vulnerability leads to a sandbox escape, allowing potentially malicious code to break out of the restricted environment and execute with greater privileges.

Remediation

Users can upgrade to Firefox 151 or Firefox ESR 140.11 to address this vulnerability.