CVE-2025-3032

Katalog CVE

CVSS 7.4 · High EPSS 0,39%

Kerentanan Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak') pada mozilla firefox, mozilla thunderbird. Skor CVSS 3.1 7.4 (High) menurut CISA ADP.

Deskripsi (NVD)

Leaking of file descriptors from the fork server to web content processes could allow for privilege escalation attacks. This vulnerability was fixed in Firefox 137 and Thunderbird 137.

Rincian

Terbit di NVD

1 April 2025

Terakhir diubah

30 September 2026

Status NVD

Modified

CVSS 3.1

7.4 (High), sumber CISA ADP
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-403: Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')

EPSS (30 hari)

0,39% peluang dieksploitasi; lebih tinggi dari 31,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mozilla.org/security/advisories/mfsa2025-20/ advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2025-23/ advisory vendor
• https://bugzilla.mozilla.org/show_bug.cgi?id=1949987 issue tracking · permissions required