Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (1)
| Vulnerability |
Summary |
Aliases |
|
VCID-wfqy-u76t-ybgb
|
Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox
developers identified a similar pattern in our IPC code. A compromised child
process could cause the parent process to return an unintentionally
powerful handle, leading to a sandbox escape.
The original vulnerability was being exploited in the wild.
*This only affects Firefox on Windows. Other operating systems are unaffected.*
|
CVE-2025-2857
|