CVE-2025-2857

Incorrect handle could lead to sandbox escapes

View on CVE.org
Published Mar 27, 2025 CVSS 3.1 · 10 Critical EPSS 2.0% KEV · Not listed
Description
Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape.
The original vulnerability was being exploited in the wild.
*This only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 136.0.4, Firefox ESR 128.8.1, and Firefox ESR 115.21.1.

Analysis

AI-generated

Technical impact

The vulnerability stems from IPC code handling in Firefox, where a compromised child process can cause the parent to return an unintentionally powerful handle. This results in a sandbox escape, allowing the attacker to bypass the isolation guarantees of the sandbox and potentially execute code with elevated privileges. The flaw is classified as CWE-668.

Affected Systems

Mozilla Firefox installations running on Windows are affected. Versions prior to 136.0.4, as well as Firefox ESR 128.8.1 and ESR 115.21.1, contain the vulnerability. Other operating systems are not impacted.

Risk and Exploitability

The CVSS score of 10 indicates critical severity, while the EPSS score of 2% suggests a low likelihood of widespread exploitation at current time. The vulnerability was exploited in the wild, and the attack vector involves a compromised child process interacting with IPC mechanisms. The issue is not listed in the CISA KEV catalog.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to Firefox 136.0.4 or the latest ESR update (128.8.1 or 115.21.1).
  • Ensure no legacy Firefox versions are installed on Windows endpoints.
  • Monitor Mozilla security advisories for any additional updates or guidance.

Generated by OpenCVE AI on June 18, 2026 at 02:49 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-8495 Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 136.0.4, Firefox ESR < 128.8.1, and Firefox ESR < 115.21.1.
History
Type Values Removed Values Added
Description Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 136.0.4, Firefox ESR < 128.8.1, and Firefox ESR < 115.21.1. Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 136.0.4, Firefox ESR 128.8.1, and Firefox ESR 115.21.1.
Title firefox: Firefox IPC sandbox escape on windows Incorrect handle could lead to sandbox escapes
Type Values Removed Values Added
Weaknesses CWE-668
Type Values Removed Values Added
First Time appeared Mozilla
Mozilla firefox
Weaknesses NVD-CWE-noinfo
CPEs cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*
cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*
Vendors & Products Mozilla
Mozilla firefox
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 10, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
Title firefox: Firefox IPC sandbox escape on windows
References
Type Values Removed Values Added
Description Following the sandbox escape in CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. Attackers were able to confuse the parent process into leaking handles to unprivileged child processes leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 136.0.4, Firefox ESR < 128.8.1, and Firefox ESR < 115.21.1. Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 136.0.4, Firefox ESR < 128.8.1, and Firefox ESR < 115.21.1.
References
Type Values Removed Values Added
Description Following the sanbdox escape in CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. Attackers were able to confuse the parent process into leaking handles into unpriviled child processes leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 136.0.4, Firefox ESR < 128.8.1, and Firefox ESR < 115.21.1. Following the sandbox escape in CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. Attackers were able to confuse the parent process into leaking handles to unprivileged child processes leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 136.0.4, Firefox ESR < 128.8.1, and Firefox ESR < 115.21.1.
Type Values Removed Values Added
Description Following the sanbdox escape in CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. Attackers were able to confuse the parent process into leaking handles into unpriviled child processes leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 136.0.4, Firefox ESR < 128.8.1, and Firefox ESR < 115.21.1.
References
Earlier changes (3)
Weaknesses

Sources

Status
PUBLISHED
Assigner
mozilla
Published
Updated
Jun 9, 2026, 4:23 PM
Reserved
Mar 27, 2025, 10:54 AM

View source JSON

Updated
Mar 28, 2025, 3:25 PM

JSON

Status
Modified
Published
Mar 27, 2025, 2:15 PM
Modified
Oct 5, 2026, 3:10 PM

View source JSON

Severity
Public date
Mar 27, 2025, 1:27 PM

View source Bugzilla JSON

Updated
Jun 18, 2026, 3:00 AM

JSON