Impact
The reported flaw allows an attacker to bypass the DOM security component in Mozilla Firefox. By subverting the intended security controls, malicious input can manipulate the document object model and execute scripts or modify page content that would otherwise be blocked. This can lead to unauthorized data disclosure or further exploitation of the vulnerable system.
Affected Systems
The issue affects all Firefox installations older than version 158 and all ESR builds older than 153.5. Users running these releases are potentially exposed unless they have applied the mitigations included in the subsequent versions.
Risk and Exploitability
The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, indicating no publicly known exploit yet. However, the nature of the DOM bypass suggests a high potential severity and significant exploitation risk once accessed. Immediate action is recommended to reduce exposure.
OpenCVE Enrichment