Conversation

Notices

1. Embed this notice
   翠星石 (suiseiseki@freesoftwareextremist.com)'s status on Friday, 28-Mar-2025 14:43:30 JST 翠星石

   in reply to

   • CatSalad🐈🥗 (D.Burch) :blobcatrainbow:
   @catsalad This is why you don't run windows and you don't run JavaScript.
   • Embed this notice
     CatSalad🐈🥗 (D.Burch) :blobcatrainbow: (catsalad@infosec.exchange)'s status on Friday, 28-Mar-2025 14:43:31 JST CatSalad🐈🥗 (D.Burch) :blobcatrainbow:
     Firefox 0-day security vulnerability (CVE-2025-2857) patched

     Mozilla patches a sandbox escape vulnerability that is already being exploited (in Chrome)

     :firefox:⁠https://www.mozilla.org/en-US/security/advisories/mfsa2025-19/

     Announced: 2025-03-27
     Impact: ⚠️ critical
     Products: Firefox, Firefox ESR (Firefox on Windows only)
     Fixed in:
     • Firefox 136.0.4 :windows:
     • Firefox ESR 115.21.1 :windows:
     • Firefox ESR 128.8.1 :windows:

     #Firefox #InfoSec #CVE #CVE_2025_2857