Mozilla Patches Critical Firefox Bug Similar to Chrome's Recent Zero-Day Vulnerability

[Passages]

Mar 28, 2025

Ravie Lakshmanan

Mozilla has released updates to address a critical security flaw impacting its Firefox browser for Windows, merely days after Google patched a similar flaw in Chrome that came under active exploitation as a zero-day.

The security vulnerability, CVE-2025-2857, has been described as a case of an incorrect handle that could lead to a sandbox escape.

"Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC [inter-process communication] code," Mozilla said in an advisory.

SNIP
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has since added the flaw to its Known Exploited Vulnerabilities (KEV) catalog, requiring that federal agencies apply the necessary mitigations by April 17, 2025.


https://thehackernews.com/2025/03/mozilla-patches-critical-firefox-bug.html?_m=3n%2e009a%2e3627%2eqb0ao44uux%2e2njc

[bucolic_frolic]

1. Been a whirlwind week

After all these changes, linked accounts are no longer linked, promotional emails (not spam) are not arriving, online meetings are faster and clearer but I wonder what it all means. I'm more protected? Whew!

But now must update FFox. Sometimes these browsers update 3 times in a week. I mean download the whole package.

[Maninacan]

2. FireFox

Have noticed more updates than usual. My desktop at home is going to struggle when i get home. Been on the road for almost a month.