A critical boundary condition vulnerability in Mozilla Firefox and Thunderbird enables unauthenticated remote attackers to potentially compromise data confidentiality and integrity.

The vulnerability stems from incorrect boundary conditions within the Audio/Video Playback component. This flaw allows an unauthenticated remote attacker to trigger the issue without user interaction, potentially leading to unauthorized data access or modification.

The vulnerability carries a CVSS score of 9.1, designating it as critical due to the potential for total impact on confidentiality and integrity. Successful exploitation could result in the compromise of sensitive user data, unauthorized system modifications, and significant reputational damage to the organization.

Immediate Action: Update all installations of Mozilla Firefox and Mozilla Thunderbird to version 153 or later immediately.

Proactive Monitoring: Review application and system access logs for anomalous traffic patterns or crashes related to media processing components.

Compensating Controls: While no direct virtual patch exists, ensure that endpoint protection software is active and that users are restricted from accessing untrusted or malicious web content that may serve as an attack vector.

Public Exploit Available: No — there is no confirmed public exploit in the available data.

Given the critical severity of this vulnerability and its potential for remote, unauthenticated exploitation, security teams must prioritize the deployment of the version 153 update across all enterprise endpoints. Failing to patch this component leaves systems exposed to severe data compromise, and immediate verification of update compliance is strongly advised.