This vulnerability is described as a mitigation bypass in the DOM navigation component and removes the expected security safeguards applied during navigation. No additional impact details are provided, so the flaw is limited to the removal of those mitigations; no explicit code execution or data disclosure is stated.

Affected products are Mozilla Firefox and Mozilla Thunderbird. The fix was applied in Firefox ESR 153.4, Firefox 157, Thunderbird 153.4 and Thunderbird 157. All earlier releases of these browsers were potentially vulnerable, but the vulnerability status for those versions has not been explicitly confirmed.

The EPSS score is reported as less than 1% and the vulnerability is not listed in the CISA KEV catalog. The CVSS score is 8.1. The likely attack vector, inferred from the nature of the component, would involve a web page or network payload that triggers the navigation logic without the usual mitigations, potentially allowing an attacker to bypass the intended constraints. The specific consequences beyond bypass are not disclosed.