CVE-2025-2857

Published Mar 27, 2025

Last updated a day ago

Windows

Firefox

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2025-2857 is a security vulnerability in Mozilla Firefox that allows attackers to escape the browser's sandbox on Windows systems. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. This vulnerability is similar to CVE-2025-2783, a previously exploited zero-day vulnerability in Chrome. The flaw stems from mismanagement of system handles that inadvertently grants elevated access to unprivileged child processes. This issue exclusively affects Firefox on Windows, with other operating systems remaining unaffected.

Description: Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 136.0.4, Firefox ESR < 128.8.1, and Firefox ESR < 115.21.1.
Source: security@mozilla.org
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Secondary
Base score: 10
Impact score: 6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Severity: CRITICAL

Weaknesses

nvd@nist.gov: NVD-CWE-noinfo

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8D63728B-F6A1-4AE4-8E2A-06279158154D",
            "versionEndExcluding": "136.0.4"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "49918C23-8656-4D5F-B626-1B7ED8E45F8F",
            "versionEndExcluding": "115.21.1"
          },
          {
            "criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D508F954-1ED2-4185-96B1-571172C5897D",
            "versionEndExcluding": "128.8.1",
            "versionStartIncluding": "128.1.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]