A spoofing vulnerability in the WebExtensions framework of Mozilla Firefox and Thunderbird allows remote attackers to manipulate browser interfaces, potentially facilitating deceptive attacks.

This spoofing vulnerability resides in the WebExtensions component. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms that the vulnerability is remotely exploitable without authentication or user interaction.

This vulnerability could allow an attacker to spoof browser interface elements, potentially leading to unauthorized data capture or credential theft through social engineering. The CVSS score of 7.5 highlights a high-risk scenario where the browser's security model is bypassed to display misleading information to the end-user.

Immediate Action: Update Mozilla Firefox and Mozilla Thunderbird to version 151 or later to resolve the underlying WebExtensions flaw.

Proactive Monitoring: Review browser extension activity logs for anomalous behavior or unexpected requests that may indicate an attempt to exploit extension-based vulnerabilities.

Compensating Controls: Implement organizational policies to restrict the installation of unauthorized or untrusted web extensions across the enterprise.

Public Exploit Available: Unknown

Organizations must treat this vulnerability with high urgency due to the ease of remote exploitation. Applying the latest updates to Mozilla products is the most effective way to eliminate this risk and ensure a secure browsing environment for all users.