CVE-2017-7760

CVE-2017-7760 is a privilege escalation vulnerability affecting Mozilla Firefox and Firefox ESR on Windows systems, specifically versions prior to Firefox 54 and Firefox ESR 52.2. A local attacker can manipulate the Mozilla Windows updater's file modification process by altering the original file's location through the Mozilla Maintenance Service, which operates with privileged access. This allows for arbitrary file manipulation within the installation directory and subsequent privilege escalation. The vulnerability has a CVSS score of 7.8 (High), indicating a low attack complexity and requiring local system access, but leading to high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or inclusion in the CISA KEV catalog, though it has received some community discussion and media coverage.