Critical · published November 11, 2025
🔥 A sneaky sandbox escape in WebGPU could let attackers break out of their confines entirely! 🔥 Think of a sandbox designed for kids to play in, but someone finds a way to slip through the fence and wreak havoc in the entire yard! That's what this vulnerability allows – the boundary meant to keep the bad guys contained is just too flimsy. If exploited, an attacker could gain access to sensitive data or even take control of the system, leading to a cascade of compromises that could go completely unnoticed. This is a critical vulnerability that could spell disaster for users, leaving their systems exposed to all sorts of malicious activities.
Think of a sandbox designed for kids to play in, but someone finds a way to slip through the fence and wreak havoc in the entire yard! That's what this vulnerability allows – the boundary meant to keep the bad guys contained is just too flimsy. This vulnerability arises from incorrect boundary conditions in the WebGPU component, allowing a sandbox escape that could lead to unauthorized access and control over the host environment.
If exploited, an attacker could gain access to sensitive data or even take control of the system, leading to a cascade of compromises that could go completely unnoticed. This is a critical vulnerability that could spell disaster for users, leaving their systems exposed to all sorts of malicious activities. To protect against this vulnerability, update Firefox and Thunderbird to version 145 or later immediately. Additionally, review any dependent applications that utilize the WebGPU component for potential exposure. You've got this! Stay proactive and secure your systems today! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| mozilla/firefox | < 145.0 | 145.0 |