Based on the description, the mitigation bypass in the Networking component may allow an attacker to circumvent security measures that normally protect the browser and email client from network‑based threats. Based on the description, it is inferred that the vulnerability could enable an attacker to exploit other weaknesses or deliver malicious payloads by exploiting the bypassed safeguards. Based on the description, it is inferred that this weakness may compromise the integrity or confidentiality of data traversing the affected applications.

Mozilla Firefox and Thunderbird are affected. Versions prior to Firefox 156, Firefox ESR 153.3, and Thunderbird 156 contain the vulnerability. Upgrading to the specified releases removes the bypass.

The CVSS score is 9.1, but the EPSS score is < 1%, indicating a very low probability of exploitation. Because the vulnerability is not listed in the CISA KEV catalog, it is not known to have been actively exploited in the field. Based on the description, it is inferred that the attack vector is likely network‑based, allowing an external attacker to trigger the bypass and potentially compromise the client. The exact likelihood of exploitation remains uncertain.