https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 23:53:20 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-03530 bdu:2025-03530 https://cve.radiocsirt.org/vuln/bdu:2025-03530 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0251 certfr-2025-avi-0251 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0251 https://cve.radiocsirt.org/vuln/euvd-2026-325949 EUVD-2026-325949 https://cve.radiocsirt.org/vuln/euvd-2026-325949 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2857 <p>Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 136.0.4, Firefox ESR 128.8.1, and Firefox ESR 115.21.1.</p> <p>Following the recent Chrome sandbox escape (CVE-2025-2783), various Firefox developers identified a similar pattern in our IPC code. A compromised child process could cause the parent process to return an unintentionally powerful handle, leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 136.0.4, Firefox ESR 128.8.1, and Firefox ESR 115.21.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-2857 https://cve.radiocsirt.org/vuln/ghsa-h8g5-2596-xjh9 <p>Following the sandbox escape in CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. Attackers were able to confuse the parent process into leaking handles to unprivileged child processes leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox &lt; 136.0.4, Firefox ESR &lt; 128.8.1, and Firefox ESR &lt; 115.21.1.</p> <p>Following the sandbox escape in CVE-2025-2783, various Firefox developers identified a similar pattern in our IPC code. Attackers were able to confuse the parent process into leaking handles to unprivileged child processes leading to a sandbox escape. The original vulnerability was being exploited in the wild. *This only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox &lt; 136.0.4, Firefox ESR &lt; 128.8.1, and Firefox ESR &lt; 115.21.1.</p> https://cve.radiocsirt.org/vuln/ghsa-h8g5-2596-xjh9 https://cve.radiocsirt.org/vuln/opensuse-su-2025:14948-1 <p>MozillaFirefox-136.0.4-1.1 on GA media</p> <p>MozillaFirefox-136.0.4-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14948-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0651 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Mozilla Firefox und Mozilla Firefox ESR ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Mozilla Firefox und Mozilla Firefox ESR ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0651