Technical impact
The updated description reinforces that a use‑after‑free flaw exists within the Graphics: WebGPU component of Firefox and Thunderbird. After the memory object is freed, an attacker can still access it and corrupt the browser’s memory layout. This corruption can lead to arbitrary code execution and elevate the attacker’s privileges within the browser, matching the privileged escalation impact originally identified. The weakness remains a classic instance of use‑after‑free (CWE-416) and also represents improper memory management (CWE-825).
Affected Systems
Mozilla Firefox versions earlier than 157 and Mozilla Thunderbird versions earlier than 157 are affected. The vulnerability is present in the WebGPU graphics subsystem of both browsers.
Risk and Exploitability
Based on the description, it is inferred that the exploit requires an attacker to deliver a specially crafted payload to the browser, typically through a malicious web page or local file that leverages WebGPU. The CVSS score of 8.8 indicates high severity. While the EPSS score is < 1%, the vulnerability is not listed in CISA's KEV catalog, the severity implied by the privilege escalation impact suggests a high risk to affected systems. Without a patch, attackers could compromise the integrity and confidentiality of a victim’s data.
