Sandbox escape in the Form Manager component is a flaw that can allow an attacker to lift restrictions imposed by the sandbox surrounding form handling behavior. The vulnerability may enable the execution of code with higher privileges than normally afforded to forms, potentially compromising the integrity and confidentiality of the affected process.

Mozilla Firefox is affected. The issue was fixed in Firefox 159 and Firefox ESR 153.6, meaning any releases prior to those versions are vulnerable.

The exploit likelihood cannot be quantified due to the absence of an EPSS score or CVSS score in the data. The vulnerability is not listed in CISA's KEV catalog. Based on the description, the attack vector is likely related to malicious web content or compromised user interaction with uncontrolled forms, which could enable privilege escalation or arbitrary code execution within the browser context.