A mitigation bypass vulnerability in Mozilla Firefox and Thunderbird creates a high-risk scenario where an attacker could achieve unauthorized data access and system manipulation.

This vulnerability involves a bypass of security mitigations within the DOM component. It requires user interaction (UI) and can be triggered remotely, allowing for both confidentiality and integrity impacts.

The CVSS score of 8.1 reflects the potential for total impact on confidentiality and integrity. Successful exploitation could allow an attacker to bypass critical security controls, potentially leading to unauthorized data exfiltration or the execution of malicious actions within the context of the user's browser session.

Immediate Action: Update Mozilla Firefox and Mozilla Thunderbird to version 151 or later, or ensure the installation of the specific 140.11 maintenance release.

Proactive Monitoring: Monitor for suspicious browser behavior, including unexpected script execution or unauthorized modification of local browser data.

Compensating Controls: Deploy endpoint protection solutions that can identify and block exploitation attempts targeting browser-based mitigation bypasses.

Public Exploit Available: Unknown

Due to the high severity and the potential for total impact on data integrity, immediate patching is required. Administrators should verify that all end-user workstations are updated to the latest version of Firefox or Thunderbird to eliminate this attack vector.