The bug has apparently been lurking in the browser's UI for some time, and no known exploits apparently had occurred, but the good news is that the fix affects build 58, beta 59, and future builds.
Firefox 58 RSS
Mozilla has released Firefox 58 today with new features such as a two-tiered WebAssembly compiler for speedier browsing, and support for credit cards within the in-built auto-fill tool.