This vulnerability allows code to escape the Firefox sandbox, giving an attacker the ability to execute arbitrary instructions on the host. The impact includes full compromise of confidentiality, integrity, and availability for the affected user, as the sandbox boundary is removed and potentially sensitive system resources become accessible. The weakness corresponds to improper privilege handling that permits code beyond its intended isolation to run with elevated privileges.

Mozilla Firefox and Firefox Focus on Android are affected. The vulnerability was fixed in Firefox 151, implying all earlier releases are vulnerable. No specific version ranges are listed, so it is recommended to treat all versions prior to 151 as affected.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, so publicly known exploitation data is limited. The CVSS score of 7.5 indicates high severity. Nonetheless, the nature of a sandbox escape indicates a high potential for serious compromise. The likely attack vector is inferred to be the delivery of malicious web content or extensions that trigger the escape, as is common with browser sandbox vulnerabilities. No additional exploitation prerequisites are documented in the provided description.