3 ms·
Mozilla warns Windows users of critical Firefox sandbox escape flaw
- bramhaag 2y ago> While Mozilla didn't share technical details regarding CVE-2025-2857, it said the vulnerability is similar to a Chrome zero-day exploited in attacks and patched by Google earlier this week Related: Operation ForumTroll: APT attack with Google Chrome zero-day exploit chain - https://news.ycombinator.com/item?id=43488841 https://news.ycombinator.com/item?id=43488841
- ogurechny 2y agoSo both Chrome and Firefox held something the wrong way, and it conveniently enabled bypassing sandbox in both cases. Very very interesting. What else might be affected?