The flaw resides in the Networking component of Mozilla Firefox and allows an attacker to increase their privileges on the host system. The vulnerability is known to have been remedied in Firefox version 150 and Firefox ESR 140.10, indicating that the flaw was functional and worthy of a security update.

All installations of Mozilla Firefox running any release older than version 150 and all Firefox ESR builds older than build 140.10 are impacted. Versions 150 and later or ESR 140.10 and later contain the fix, rendering those and later releases immune to this specific privilege escalation. The vulnerability affects only the Firefox product family identified by the CNA.

No CVSS or EPSS score is supplied, and the flaw is not catalogued in the CISA KEV list, so the precise severity and likelihood of exploitation are not quantified in the available data. The description does not specify the attack vector; it is inferred that exploitation could involve local or remote activities that target the Networking component, but this inference is only based on the component name, not on explicit documentation.