This vulnerability allows an attacker to read sensitive data through the Networking:HTTP component in Firefox. The flaw could expose configuration files, session data, or other private information that the browser handles. As the issue was identified in the core networking code, the exposure can potentially reveal data that the user or the website receives or transmits.

Affected systems include Mozilla Firefox distributions older than version 159 and the Extended Support Release version 153.6. Any user running those unpatched builds could be at risk until the security update is applied.

The EPSS score is currently unavailable and the vulnerability is not listed in the CISA KEV catalog, implying no publicly known exploitation yet. Without a published CVSS score, the precise severity remains undefined, but the potential for broad information leakage suggests a high impact if exploited. The likely attack vector is remote via HTTP traffic, although the exact conditions are not detailed in the advisory. Until a patched version is installed, the risk is considered significant.