This vulnerability is a mitigation bypass in the DOM security component. It allows attackers to subvert the intended security controls over the document object model, potentially enabling unauthorized script execution or manipulation of page content. The issue was fixed in Firefox 158 and Firefox ESR 153.5, and in Thunderbird 158 and Thunderbird ESR 153.5.

The issue affects all Firefox installations older than version 158 and all ESR builds older than 153.5, as well as all Thunderbird installations older than version 158 and all ESR builds older than 153.5. Users running these releases are potentially exposed unless they have applied the mitigations included in subsequent versions.

The EPSS score is less than 1 %, and the vulnerability is not listed in the CISA KEV catalog, indicating no publicly known exploit yet. The CVSS score of 8.1 indicates high severity. However, the nature of the DOM bypass suggests a high potential severity and significant exploitation risk once accessed. Immediate action is recommended to reduce exposure.