This vulnerability involves a mitigation bypass in the Document Object Model (DOM) security component of Mozilla Firefox, identified as CVE-2025-13018. It was fixed in Firefox 145 and Firefox ESR 140.5. The CVSS 3.1 base score is 8.1, with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N, indicating that the vulnerability can be exploited remotely over the network with low attack complexity, no privileges required, user interaction needed, and results in high confidentiality and integrity impact without affecting availability. The vendor advisory confirms the fix and classifies the impact as moderate for this issue, within a set of multiple security vulnerabilities addressed in the same releases.

The vulnerability allows an attacker to bypass mitigation controls in the DOM security component, potentially leading to high confidentiality and integrity impacts. This could allow unauthorized access or manipulation of sensitive data within the browser context. However, the vendor rates the impact of this specific vulnerability as moderate. There are no reports of active exploitation in the wild. The overall security risk is significant given the CVSS score and the nature of the vulnerability.

A fix is available and has been officially released by Mozilla in Firefox 145 and Firefox ESR 140.5. Users and administrators should update to these versions or later to remediate this vulnerability. No additional mitigation actions are indicated by the vendor advisory beyond applying the official update.