CyberRota Analysis
AI-GeneratedA critical use-after-free vulnerability in the DOM components of Firefox allows for a sandbox escape, potentially enabling attackers to execute arbitrary code outside the browser's security boundaries. Organizations using affected versions of Firefox should prioritize patching to mitigate the risk of exploitation, as this could lead to severe impacts on system integrity and data security. Users of Firefox ESR versions 115.42, 140.17, and 153.4, as well as Firefox 157, are particularly urged to update immediately.
Original NVD Description
Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Related CVEs
Other vulnerabilities affecting the same vendor(s)