Mozilla Firefox and Thunderbird version 149 are affected by critical memory safety vulnerabilities that could potentially lead to arbitrary code execution.

The software contains memory safety defects, including memory corruption issues, which an unauthenticated attacker could leverage to achieve arbitrary code execution via crafted malicious content. The vulnerability requires user interaction to trigger the exploit.

The potential for arbitrary code execution poses a severe risk to organizational security, as it could lead to full system compromise, data theft, or the installation of persistent malware. With a CVSS score of 7.5, this vulnerability represents a high-risk entry point into endpoint environments, potentially facilitating lateral movement within the network.

Immediate Action: Update Mozilla Firefox and Mozilla Thunderbird to version 150 or later immediately to resolve the identified memory safety issues.

Proactive Monitoring: Review endpoint security logs for anomalous browser or mail client behavior, such as unexpected crashes or unauthorized process spawning.

Compensating Controls: While no direct virtual patch exists for client-side memory safety, ensure that endpoint detection and response systems are updated to identify and block potential exploitation attempts associated with browser memory corruption.

Public Exploit Available: No (exploit_available: false)

Given the high severity of memory corruption vulnerabilities in widely deployed software like Firefox and Thunderbird, immediate action is required. Organizations must prioritize the deployment of version 150 across all workstations to mitigate the risk of arbitrary code execution and potential system compromise.