Memory safety bugs in Mozilla Firefox and Thunderbird prior to version 150.0.2 allow unauthenticated remote attackers to achieve arbitrary code execution.

This is a set of memory safety issues involving memory corruption. Attackers can trigger these flaws without authentication by enticing users to interact with malicious content.

A successful exploit of these memory safety vulnerabilities can lead to total system compromise, including unauthorized access to sensitive user data, system instability, and remote code execution on the host machine. The high CVSS score of 8.1 reflects the severe technical impact of potential remote code execution, threatening overall organizational confidentiality, integrity, and availability.

Immediate Action: Update Mozilla Firefox and Mozilla Thunderbird to version 150.0.2 or later immediately.

Proactive Monitoring: Monitor client endpoints for unexpected application crashes, unauthorized network connections, or abnormal process behavior.

Compensating Controls: Enforce safe browsing policies and utilize endpoint detection and response tools to monitor for unauthorized child processes spawned by browser and email clients.

Public Exploit Available: False

Security teams must prioritize updating all instances of Mozilla Firefox and Thunderbird across the enterprise to version 150.0.2 or later. Given the potential for remote code execution resulting from memory corruption, prompt patch deployment is critical to eliminate exposure.