A vulnerability in the Web Codecs component of Mozilla Firefox and Thunderbird could allow an unauthenticated attacker to cause information disclosure.

The software contains a flaw in the Web Codecs component due to incorrect boundary conditions, which can be triggered by an unauthenticated attacker via a network-based vector.

This vulnerability carries a CVSS score of 7.5, indicating a high severity risk. Successful exploitation could lead to unauthorized information disclosure, potentially exposing sensitive user data processed by the browser or email client. Given the widespread use of these applications, the impact on organizational confidentiality is significant.

Immediate Action: Update Mozilla Firefox and Thunderbird to version 151 or the latest available security release provided by the vendor.

Proactive Monitoring: Review browser and system logs for unexpected crashes or errors related to media processing components.

Compensating Controls: Ensure that endpoint protection software is active and fully updated to detect anomalous process behavior.

Public Exploit Available: unknown

The severity of this flaw necessitates prompt patching across all corporate endpoints. Administrators should prioritize the deployment of the latest versions of Firefox and Thunderbird to protect against potential exploitation of the Web Codecs component.