This vulnerability involves multiple memory safety bugs in Firefox 145 and Thunderbird 145, some of which demonstrated memory corruption that could be exploited to run arbitrary code. The issues were fixed in Firefox 146 and Thunderbird 146. The CVSS 3.1 base score is 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L), indicating network exploitable vulnerabilities with low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability. The vendor advisory confirms these fixes and provides detailed references to the bugs and patches.

The vulnerabilities could allow remote attackers to execute arbitrary code on affected systems without requiring user interaction or privileges, potentially compromising confidentiality, integrity, and availability of the system. However, no known exploits in the wild have been reported. The impact is rated as high by Mozilla and the CVSS score supports this assessment.

Mozilla has released official fixes for these vulnerabilities in Firefox 146 and Thunderbird 146. Users and administrators should update to these versions or later to remediate the issues. Since this is not a cloud service, local patching is required. No additional mitigation steps are indicated by the vendor advisory.