CVE-2025-2857CWE-668

CVE-2025-2857

Critical · published March 27, 2025

CVSS v3.1
10.0
EPSS
2%
Percentile
80.3
In the wild
Unconfirmed
What it is

🚨 A sneaky bug in Firefox could allow a rogue child process to escape the sandbox — just like a mischievous kid slipping past a security guard! 🔥 Imagine a restaurant where the kitchen (sandbox) has a strict no-entry policy, but a crafty waiter (child process) manages to hand a menu (powerful handle) directly to the dining area (parent process) without anyone noticing. Suddenly, the kitchen is vulnerable to all kinds of wild orders! If exploited, an attacker could gain unauthorized access to sensitive data or system resources on your Windows machine, wreaking havoc as they maneuver around intended security checks. This could lead to data leaks or even complete control of the system, making it a critical situation to address.

Put simply

Imagine a restaurant where the kitchen (sandbox) has a strict no-entry policy, but a crafty waiter (child process) manages to hand a menu (powerful handle) directly to the dining area (parent process) without anyone noticing. Suddenly, the kitchen is vulnerable to all kinds of wild orders! This vulnerability arises from a flaw in Firefox's Inter-Process Communication (IPC) code, where a compromised child process can manipulate the parent process into granting it a powerful handle, allowing for a sandbox escape.

What to do

If exploited, an attacker could gain unauthorized access to sensitive data or system resources on your Windows machine, wreaking havoc as they maneuver around intended security checks. This could lead to data leaks or even complete control of the system, making it a critical situation to address. To protect yourself, update Firefox immediately to version 136.0.4, Firefox ESR 128.8.1, or Firefox ESR 115.21.1. If you're managing systems, ensure all installations are patched promptly. Regularly review configurations to prevent unauthorized access. You've got this! 🦸 Just follow these steps to fortify your defenses and keep those pesky vulnerabilities at bay!

The record
Technical detail
CVSS v3.1
10.0 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01976 · 80.3th percentile
Weakness
CWE-668 · Exposure of Resource to Wrong Sphere
Published
2025-03-27T18:15Z
Affected products (3)
ProductVersionsFixed in
mozilla/firefox< 136.0.4136.0.4
mozilla/firefox< 115.21.1115.21.1
mozilla/firefox≥ 128.1.0, < 128.8.1128.8.1
References (4)
EPSS history
Timeline
  • 27 MAR 13:27Z
    Incorrect handle could lead to sandbox escapes
    cvelistv5