A privilege escalation flaw in the WebRTC component of Mozilla Firefox and Thunderbird exposes users to potential system compromise via remote interaction.

This vulnerability resides in the WebRTC Audio/Video processing component. The CVSS vector (AV:N/AC:L/PR:N/UI:R) indicates that an unauthenticated attacker can trigger this flaw by enticing a user to interact with malicious content.

The ability for an attacker to escalate privileges can lead to a full system compromise, resulting in unauthorized data access, execution of malicious code, and complete loss of system integrity. With a CVSS score of 8.8, this high-severity vulnerability poses a significant risk to organizational endpoints and requires immediate attention to prevent lateral movement or data exfiltration.

Immediate Action: Update Mozilla Firefox and Mozilla Thunderbird to version 151 or later immediately.

Proactive Monitoring: Monitor endpoint security logs for unusual process execution patterns or unexpected spikes in WebRTC-related activity.

Compensating Controls: Ensure browser security settings are strictly enforced via Group Policy or MDM, and consider disabling WebRTC if it is not a required business function.

Public Exploit Available: Unknown.

Given the high CVSS score and the critical nature of privilege escalation flaws in web browsers, administrators must prioritize the deployment of the version 151 update across all managed environments. Timely patching is the most effective defense against this vulnerability.