Mozilla Firefox and Thunderbird are affected by a DOM Security component information disclosure vulnerability that could lead to unauthorized data exposure.

This is an information disclosure flaw located within the Document Object Model (DOM) security subsystem. The vulnerability is exploitable by an unauthenticated remote attacker via network-based vectors.

Successful exploitation allows an attacker to gain access to sensitive information that should be protected by the browser's security boundaries. While the CVSS score of 7.5 indicates a High severity, the impact is primarily restricted to data confidentiality, potentially leading to unauthorized access to user data or session information, which could facilitate further downstream attacks.

Immediate Action: Update Mozilla Firefox and Mozilla Thunderbird to version 151 or later immediately.

Proactive Monitoring: Monitor network traffic for unusual patterns originating from the browser and review application logs for signs of anomalous DOM-related activity.

Compensating Controls: Ensure that browser security settings are configured to minimize the execution of untrusted scripts and utilize endpoint security software to detect potential malicious memory access attempts.

Public Exploit Available: Unknown

Given the potential for unauthorized information disclosure, organizations should prioritize updating all instances of Mozilla Firefox and Thunderbird to version 151 or later. Applying these vendor-supplied updates is the only definitive way to remediate this security risk and protect user data integrity.