Sandbox escape due to a race condition in the Networking component (CWE-362) allows a malicious actor to break out of the browser or application sandbox. Based on the description, it is inferred that the attacker could trigger a timing race that causes the process to move outside its confined environment, potentially allowing arbitrary code execution or unauthorized access to local resources. The issue was addressed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

All users of Mozilla Firefox versions prior to 158 and Firefox ESR versions prior to 153.5, as well as Thunderbird versions prior to 158 and Thunderbird 153.5, are potentially vulnerable. The issue was addressed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

The EPSS score is < 1%, indicating a very low probability of exploitation. The vulnerability has not been listed in the CISA KEV catalog. The publicly disclosed CVSS score of 8.3 indicates high severity. Based on the description, it is inferred that successful exploitation would require carefully timed and specific conditions due to the race condition, which may limit the likelihood of widespread attack. However, as the vulnerability exists in current releases that have not yet received the fix, administrators should act promptly to mitigate risk.