This privilege escalation flaw in Mozilla Firefox and Thunderbird's WebRTC Audio/Video component permits an attacker to gain higher privileges within the browser by exploiting improper authorization controls. The vulnerability, fixed in Firefox 151 and Thunderbird 151, could allow code execution with elevated rights, enabling access to sensitive data or system resources. It maps to the listed improper authorization weaknesses (CWE‑269).

Mozilla Firefox browsers older than version 151 and Mozilla Thunderbird before version 151 contain the vulnerable WebRTC module. All releases before 151 from both vendors are considered affected until the fix is applied.

The CVSS score of 8.8 indicates high severity, and the vulnerability is not listed in CISA’s KEV catalog. The EPSS score is < 1%, suggesting low exploitation likelihood. Based on the description, it is inferred that the attack vector involves delivering malicious content via an HTTP(S) request that activates the WebRTC component, making exploitation feasible through a compromised or malicious website.