Privilege Escalation

firefox and thunderbird are vulnerable to Privilege Escalation. An attacker could exploit this vulnerability by creating a malicious website that would show a popup notification asking for permission to access the user’s files. If the user clicked on the notification, the permission would be granted, even if the notification was displayed for a very short period of time. The attacker could then use the permission to access the user’s files.