Mozilla Firefox Sandbox Escape Vulnerability on Windows

A vulnerability allowing sandbox escape has been identified in Mozilla Firefox on Windows. A compromised child process could manipulate the parent process into granting an unintentionally powerful handle, similar to a recent vulnerability in Google Chrome (CVE-2025-2783). This issue affects Firefox versions prior to 136.0.4, as well as Firefox ESR versions prior to 128.8.1 and 115.21.1.

Impact

Exploitation of this vulnerability allows a child process to escape its sandbox, potentially leading to unauthorized access or actions within the parent process.

Remediation

Users can upgrade to Firefox 136.0.4, Firefox ESR 128.8.1, or Firefox ESR 115.21.1 to address this vulnerability.