Mozilla Firefox
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*
- < 137
A vulnerability exists in Firefox versions prior to 137 and Thunderbird versions prior to 137, where file descriptors are leaked from the fork server to web content processes. This leak could potentially be exploited to escalate privileges.
Exploitation of this vulnerability could lead to unauthorized privilege escalation.
Users can upgrade to Firefox 137 or Thunderbird 137 to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.