This vulnerability allows an attacker to elevate privileges within the Firefox browser by exploiting a flaw in the Places component, which manages bookmarks and browsing history. The bug could enable the execution of higher‑privileged code or access to protected data, potentially compromising the integrity or confidentiality of the system. The vulnerability is rated CVSS 8.8, indicating a high severity risk for affected users. The description confirms that the issue has been resolved in Firefox ESR 153.4 and Firefox 157, underscoring the urgency of applying the patch before exploitation can occur.

Mozilla Firefox browsers, including the ESR release 153.4 and the mainline 157. The fix applies to all earlier releases that do not contain the patch, meaning any version before 153.4 or 157 may still be vulnerable. Users on these or older builds are at risk and should upgrade when possible.

The reported CVSS score of 8.8 reflects a significant level of risk, and while an EPSS score is not available, the lack of a CISA KEV listing suggests no known large‑scale exploitation yet. The vulnerability is a privilege‑escalation flaw, which is likely exploitable by a local user or through content that the browser processes (e.g., a malicious web page or file). An attacker could use it to gain higher privileges inside the browser process, potentially escalating to system level if further vulnerabilities are present. Owing to the high CVSS score and the component’s core role in user data handling, it is advisable to treat this as a high‑risk flaw even without confirmed remote exploitation evidence.