High

Analysis Summary

CVE-2025-2857

Mozilla Firefox could allow a remote attacker to bypass security restrictions, caused by an incorrect handle. The attacker could confuse the parent process into leaking handles into unprivileged child processes. An attacker could exploit this vulnerability to escape the browser’s sandbox and execute arbitrary code on affected systems.

Impact

• Security Bypass

Indicators of Compromise

CVE

• CVE-2025-2857

Affected Vendors

Remediation

Refer to Mozilla Security Advisory for patch, upgrade, or suggested workaround information.

Mozilla Security Advisory