The vulnerability is a privilege escalation flaw in Firefox’s navigation component within the Document Object Model. It permits an attacker to gain elevated privileges by manipulating navigation behavior that bypasses normal access control checks. The flaw is rooted in missing or improper authorization during navigation processing, potentially allowing the execution of privileged code, data exfiltration, or other malicious actions. Based on the description, it is inferred that an attacker could trigger this attack by serving a crafted web page that manipulates the navigation component.

Mozilla Firefox users running versions earlier than 158 in the main release stream, and earlier than 153.5 in the ESR series, are affected. Versions 158 and 153.5 or newer contain the fix and are considered safe.

The CVSS score of 8.8 indicates a high severity vulnerability. EPSS is not available, and the flaw is not listed in the CISA KEV catalog, suggesting no publicly documented exploitation to date. Based on the description, it is inferred that an attacker could remotely trigger the flaw via a crafted web page visited by the user. Despite the lack of known exploitation, the significant severity and potential for privilege escalation warrant immediate attention for systems running outdated Firefox versions.