Mozilla Firefox and Thunderbird are vulnerable to a denial of service attack through an out of memory error in the WebRender component, which may lead to application instability or crashes.

This is an unauthenticated denial of service vulnerability located within the Graphics WebRender component. It allows an attacker to cause an out of memory state, leading to service disruption without requiring prior authentication.

The vulnerability carries a CVSS score of 7.5, indicating a high severity risk to service availability. Successful exploitation results in the abrupt termination of the browser or email client, which causes user productivity loss and potential data corruption if active tasks are interrupted during the crash.

Immediate Action: Update Mozilla Firefox and Mozilla Thunderbird to the versions specified in the vendor security advisory (Firefox 142, Firefox ESR 140.2, Thunderbird 142, or Thunderbird 140.2).

Proactive Monitoring: Monitor system logs for frequent application restarts or unexpected process terminations that may indicate exploitation attempts.

Compensating Controls: Ensure that endpoint protection software is active and that users are restricted from accessing untrusted or malicious web content that may attempt to trigger memory intensive rendering tasks.

Public Exploit Available: No (exploit_available: false)

Given the high impact on service availability and the ease of triggering the vulnerability remotely, organizations should prioritize deploying the provided updates across all enterprise workstations. Patching is the only effective method to resolve this memory management flaw and restore system stability.