Technical impact
Based on the description, it is inferred that the flaw allows a crafted file to circumvent the browser’s mitigation controls. The vulnerability is a mitigation bypass in Firefox’s and Thunderbird’s File Handling component, classified as CWE‑693. While the flaw does not guarantee arbitrary code execution, the ability to override file‑handling mitigations could enable malicious code to run with elevated privileges, threatening confidentiality, integrity, and availability of the affected system.
Affected Systems
All installations of Mozilla Firefox older than version 157.0.1 and Thunderbird older than version 158 are affected, regardless of platform. Devices running Windows, macOS, Linux, or Android that still use these outdated versions are susceptible. Even isolated devices that receive malicious files through USB, email, or downloads from compromised sites remain at risk.
Risk and Exploitability
Based on the description, it is inferred that the likely attack vector is a malicious file delivered via phishing, compromised website, or insecure file transfer, which Firefox would process without the expected safeguards. The CVSS score of 9.8 marks this issue as critical, and the EPSS score of less than 1 % indicates a low probability of exploitation. The vulnerability is not yet listed in CISA’s KEV catalog, suggesting no public exploits are known. The flaw was fixed in Firefox 157.0.1 and Thunderbird 158, but older versions remain vulnerable. Although exploitation remains theoretical, the high severity warrants immediate attention.
