The updated description reveals a DoS vulnerability in the StorageManager component that lets an attacker disrupt the operation of Mozilla products. The flaw, fixed in Firefox ESR 153.4, Firefox 157, Thunderbird ESR 153.4, and Thunderbird 157, can consume excessive storage resources and cause the application to become unresponsive. The description does not detail specific exploitation conditions; it is inferred that the attack may target sites that repeatedly write to storage or allocate large storage objects.

The vulnerability impacts Mozilla Firefox and Thunderbird. Versions prior to Firefox ESR 153.4 and the regular Firefox build before 157, as well as Thunderbird ESR 153.4 and Thunderbird before 157, are potentially exposed. Later releases include the fix and are not vulnerable.

The vulnerability is not listed in CISA’s KEV catalog and an EPSS score of < 1% indicates a very low probability of exploitation. The CVSS score of 6.5 indicates a medium severity. However, a DoS condition that fully incapacitates the browser still poses a significant risk to availability. Even with low exploitation probability and not listed in KEV, remediation remains necessary. Based on the information, the most likely attack vector is via malicious web pages that trigger heavy storage usage; this inference is drawn from the nature of the StorageManager component.