Mozilla Patches Windows Vulnerability Following Chrome Zero-Day

Mozilla has released an urgent update for Firefox on Windows to fix a critical vulnerability. This follows a similar issue found in Google Chrome, emphasizing the need for quick action.

The update affects Firefox 136.0.4 and Firefox ESR versions 128.8.1 and 115.21.1. It addresses a sandbox escape vulnerability that could allow a compromised child process to gain control of the parent process.

CVE-2025-2857: Critical Vulnerability

A critical vulnerability, identified as CVE-2025-2857, has been discovered by Firefox developers, linked to a pattern found in their Inter-Process Communication (IPC) code. While this issue is similar to the known Chrome exploit (CVE-2025-2783), it is specific to Firefox.

Key Points:

• Exploitation: Evidence suggests that this vulnerability has been exploited in the wild.
• Urgency: The exploitation in real-world scenarios highlights the need for an immediate fix.

Impact Overview:

• Affected Products: Firefox and Firefox ESR
• Affected Platforms: Windows
• Other Operating Systems: Not affected
• Reported by: Andrew McCreight

Urgent Security Update for Firefox Users

The recent Chrome exploit, CVE-2025-2783, has brought to light vulnerabilities in sandboxing technologies used by major browsers. This vulnerability, known as a sandbox escape, enables malicious actors to bypass security measures and execute harmful code beyond the intended boundaries.

Mozilla’s Quick Response:

• Mozilla has acted swiftly to address this issue, demonstrating its commitment to user security by resolving the flaw before it could cause significant harm.
• By closely monitoring threats and collaborating with security researchers, Mozilla has ensured the continued safety of its users.

Action Required for Firefox Users:

• Affected Users: Firefox users on Windows
• Action: Update to the latest version of Firefox immediately.
• How to Update:
  • Open the “Help” menu.
  • Select “About Firefox.”
  • The update will install automatically if an internet connection is available.

The rapid response from Mozilla highlights the importance of staying ahead of ever-evolving cybersecurity threats. To ensure your online safety, always keep your software up to date and follow best security practices.