Skip to content
CVE PROGRAM SOURCE RECORD7.4 High

CVE-2025-3032

Leaking file descriptors from the fork server

Description

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability was fixed in Firefox 137 and Thunderbird 137.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox

  • 137 to ≤ *unaffected

Mozilla Thunderbird

  • 137 to ≤ *unaffected

References