The vulnerability originates in Firefox's request handling component, allowing an attacker to bypass established access controls and gain elevated privileges on the victim machine. By exploiting improper validation of incoming requests, an attacker can execute privileged code, potentially compromising the entire system. This flaw is classified as a privilege escalation weakness.

Affected users are those running Mozilla Firefox versions prior to 154 and the ESR line before 153.1. All users of the legacy Firefox distribution, especially those who have not applied recent security updates, remain vulnerable.

There is no EPSS score available, and the vulnerability is not currently listed in the CISA KEV catalog, indicating limited public evidence of active exploitation. The CVSS score is not provided, but the nature of the flaw suggests a high severity. The likely attack path is through a specially crafted request that a user might process in Firefox, such as visiting a malicious site or interacting with compromised network traffic. Depending on the victim’s user permissions, the attacker may gain local privilege escalation.