CVE-2025-3032: Leaking file descriptors from the fork server
Published Apr 1, 2025
·Updated
Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks.
Affected Software
4 affected componentsFixes available
Mozilla Thunderbird<137
137
Mozilla Firefox<137
137
Mozilla Firefox<137.0
Mozilla Thunderbird<137.0
Event History
Apr 1, 2025
CVE Published
via Mozilla·12:00 AM
CVE Published
via MITRE·12:29 PM
Data Sourced
via MITRE·12:29 PM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2025-3032?
CVE-2025-3032 has been classified as a high severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2025-3032?
To mitigate CVE-2025-3032, users should update Firefox and Thunderbird to version 137 or later.
3
What are the affected software versions for CVE-2025-3032?
CVE-2025-3032 affects Firefox versions less than 137 and Thunderbird versions less than 137.
4
What type of attacks does CVE-2025-3032 expose users to?
CVE-2025-3032 allows for privilege escalation attacks through leaking file descriptors.
5
Who is the vendor for CVE-2025-3032?
The vendor for CVE-2025-3032 is Mozilla, responsible for both Firefox and Thunderbird software.