Critical · published October 28, 2025
🚨 A sneaky use-after-free vulnerability in Firefox could let mischief-makers escape their sandboxed confines! 🔥 Think of it like a mischievous child sneaking past a security checkpoint at school—they could access all the restricted areas if they can trick the system just right. That’s what’s happening here with a compromised child process escaping into the browser or GPU! If exploited, an attacker could potentially gain full access to sensitive data or even take control of the entire browser process. This means they could execute malicious code, leading to devastating breaches and compromised user safety. The stakes are sky-high!
Think of it like a mischievous child sneaking past a security checkpoint at school—they could access all the restricted areas if they can trick the system just right. That’s what’s happening here with a compromised child process escaping into the browser or GPU! Starting with Firefox version 142, a compromised child process could exploit a use-after-free condition during WebGPU-related IPC calls, potentially allowing it to escape its sandbox and wreak havoc.
If exploited, an attacker could potentially gain full access to sensitive data or even take control of the entire browser process. This means they could execute malicious code, leading to devastating breaches and compromised user safety. The stakes are sky-high! Immediately update Firefox to version 144.0.2 or later to patch this vulnerability. It's crucial to review your existing security measures and ensure that all systems utilizing Firefox are up to date—you do not want to be vulnerable! You’ve got this! Patch up those vulnerabilities and keep surfing the web safely! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| mozilla/firefox | ≥ 142.0, < 144.0.2 | 144.0.2 |