CVE-2025-2857: Incorrect handle could lead to sandbox escapes
Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. This only affects Firefox on Windows. Other operating systems are unaffected.
Other sources
Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. This only affects Firefox on Windows. Other operating systems are unaffected.. This vulnerability was fixed in Firefox 136.0.4, Firefox ESR 128.8.1, and Firefox ESR 115.21.1.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2857?
CVE-2025-2857 has been classified as a high-severity vulnerability due to its potential for sandbox escape.
How do I fix CVE-2025-2857?
You can fix CVE-2025-2857 by updating to the latest version of Firefox or Firefox ESR as specified in the vulnerability details.
What versions of Firefox are affected by CVE-2025-2857?
CVE-2025-2857 affects Firefox versions up to 136.0.4 and Firefox ESR versions up to 115.21.1 and 128.8.1.
Can CVE-2025-2857 be exploited remotely?
Yes, CVE-2025-2857 can potentially be exploited remotely if a targeted child process is compromised.
What type of vulnerability is CVE-2025-2857?
CVE-2025-2857 is a sandbox escape vulnerability that allows a compromised child process to gain elevated privileges.