- Kaspersky recently revealed a zero-day vulnerability in Google Chrome
- Mozilla now says it has found a similar problem in Firefox
- The error was used to target Russian targets in a cyber-spionage campaign
A worrying security error similar to the Chrome Zero-Day question has recently discovered and patched by Google has now been discovered and remedied in the Firefox browser.
In a security advice published on March 27, 2025, Mozilla said, after the discovery of Chrome Sandbox Escape -vulnerability, “Various Firefox developers” found a similar pattern in the browser’s IPC code.
“A compromised children’s process can cause the overall process to return an unintentionally powerful handle, leading to a sandbox flight,” Mozilla explained. To escape from the sandbox is one of the browser’s “primary safety defense”, reports Cyberinsides.
Patching of the error
A sandbox in a web browser is a security mechanism that isolates to run web content (such as JavaScript, plugins or IFRAMES) from the rest of the system.
The goal is to prevent potentially malicious sites or scripts from accessing sensitive user data, change system files or interfere with other applications.
By “escaping the sandbox”, cyber criminals could get malware run on the target computer through the browser.
A patch has been released and Firefox users are advised to update their browsers to versions Firefox 136.0.4, Firefox ESR 128.8.1, Firefox ESR 115.21.1 to mitigate the problem. Mozilla also added that the error affects Firefox on Windows and that other operating systems are not affected.
It emphasized that the chrome defect was exploited in nature, suggesting that Firefox -a remained hidden.
Chrome’s original vulnerability is traced as CVE-2025-2783, while Firefox One is traced as CVE-2025-2857. No difficulty has yet been assigned.
Neither does Google or Mozilla, discuss the threat actors or the victims. However, scientists from Kaspersky (who originally found the error) said the error was used to target people in Russia.
The campaign involved phishing and redirecting victims to primakovReadings[dot]Info. The entire campaign was called Operation ForumRoll, and apparently the goal is to complete cyber-espionage.
