Поиск уязвимостей
Количество 9
Количество 9
CVE-2025-2857
Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 136.0.4, Firefox ESR 128.8.1, and Firefox ESR 115.21.1.
CVE-2025-2857
Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 136.0.4, Firefox ESR 128.8.1, and Firefox ESR 115.21.1.
CVE-2025-2857
Following the recent Chrome sandbox escape (CVE-2025-2783), various Fi ...
GHSA-h8g5-2596-xjh9
Following the sandbox escape in CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. Attackers were able to confuse the parent process into leaking handles to unprivileged child processes leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 136.0.4, Firefox ESR < 128.8.1, and Firefox ESR < 115.21.1.
BDU:2025-03530
Уязвимость механизма межпроцессорного взаимодействия (IPC) браузера Mozilla Firefox, позволяющая нарушителю обойти существующие ограничения безопасности и выполнить произвольный код
ALT-PU-2025-4968
ALT-PU-2025-4968: package `firefox-esr` update to version 128.8.1-alt1
ALT-PU-2025-5829
ALT-PU-2025-5829: package `firefox-esr` update to version 128.8.1-alt1
ALT-PU-2025-6353
ALT-PU-2025-6353: package `firefox` update to version 138.0.1-alt1
ALT-PU-2025-7697
ALT-PU-2025-7697: package `firefox` update to version 138.0.1-alt0.p10.1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-2857 Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 136.0.4, Firefox ESR 128.8.1, and Firefox ESR 115.21.1. | 2% Низкий | больше 1 года назад | |
 | CVE-2025-2857 Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 136.0.4, Firefox ESR 128.8.1, and Firefox ESR 115.21.1. | CVSS3: 10 | 2% Низкий | больше 1 года назад |
| CVE-2025-2857 Following the recent Chrome sandbox escape (CVE-2025-2783), various Fi ... | CVSS3: 10 | 2% Низкий | больше 1 года назад |
| GHSA-h8g5-2596-xjh9 Following the sandbox escape in CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. Attackers were able to confuse the parent process into leaking handles to unprivileged child processes leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 136.0.4, Firefox ESR < 128.8.1, and Firefox ESR < 115.21.1. | CVSS3: 10 | 2% Низкий | больше 1 года назад |
 | BDU:2025-03530 Уязвимость механизма межпроцессорного взаимодействия (IPC) браузера Mozilla Firefox, позволяющая нарушителю обойти существующие ограничения безопасности и выполнить произвольный код | CVSS3: 10 | 2% Низкий | больше 1 года назад |
| ALT-PU-2025-4968 ALT-PU-2025-4968: package `firefox-esr` update to version 128.8.1-alt1 | CVSS3: 10 | 2% Низкий | больше 1 года назад |
| ALT-PU-2025-5829 ALT-PU-2025-5829: package `firefox-esr` update to version 128.8.1-alt1 | CVSS3: 10 | больше 1 года назад | |
| ALT-PU-2025-6353 ALT-PU-2025-6353: package `firefox` update to version 138.0.1-alt1 | CVSS3: 10 | больше 1 года назад | |
| ALT-PU-2025-7697 ALT-PU-2025-7697: package `firefox` update to version 138.0.1-alt0.p10.1 | CVSS3: 10 | больше 1 года назад |
Уязвимостей на страницу