An information disclosure vulnerability in the WebGPU component of Mozilla Firefox and Thunderbird allows remote attackers to access protected system information.

This vulnerability affects the Graphics: WebGPU component. The CVSS vector (AV:N/AC:L/PR:N/UI:N) indicates that the flaw is fully automatable and does not require user interaction or authentication to exploit.

Successful exploitation allows unauthorized access to potentially sensitive information processed within the browser's graphics memory. With a CVSS score of 7.5, this vulnerability represents a significant risk to data confidentiality, as it could facilitate the leakage of sensitive user data or system artifacts to external actors.

Immediate Action: Update Mozilla Firefox and Mozilla Thunderbird to version 151 or later immediately to resolve the memory exposure.

Proactive Monitoring: Review web server and endpoint logs for suspicious requests directed at graphics-intensive web applications.

Compensating Controls: Use network-level filtering to block access to untrusted domains that may attempt to utilize malicious WebGPU calls.

Public Exploit Available: Unknown.

The severity of this information disclosure necessitates an immediate update. Organizations should ensure all browser instances are updated to version 151 to eliminate the risk of automated data exposure.