Mozilla warns Windows users of critical Firefox sandbox escape flaw

by akyuuon 3/27/2025, 5:25 PMwith 2 comments

by bramhaagon 3/27/2025, 5:30 PM

> While Mozilla didn't share technical details regarding CVE-2025-2857, it said the vulnerability is similar to a Chrome zero-day exploited in attacks and patched by Google earlier this week

Related: Operation ForumTroll: APT attack with Google Chrome zero-day exploit chain - https://news.ycombinator.com/item?id=43488841

by ogurechnyon 3/27/2025, 7:14 PM

So both Chrome and Firefox held something the wrong way, and it conveniently enabled bypassing sandbox in both cases. Very very interesting. What else might be affected?