Mozilla is “Bad in the wild” of the Windows browser security bug in Firefox.
In a simple update, Mozilla said that after identifying and modifying new bugs tracked with CVE-2025-2857, Browser has updated Browser to Firefox version 136.0.4.
Anyone who exploits bugs can avoid the sandbox of the Firefox, which limits access to the other apps of the browser and the data of the user computer.
The bug also affected another browser with the same codebase as the Firefox for Windows, such as Tor Browser, and was patched to update the browser to 14.0.7.
Boris Larin, a researcher at Kasper Ski, who first discovered Chrome Zero Day, confirmed in the post that the root cause of Chromeberg also affects Firefox. Kaspersky has previously used the use of abuse with attacks on journalists, educational institution employees and government agencies in Russia.
