Mozilla has addressed a critical vulnerability, CVE-2025-2857, in its Firefox browser for Windows.The vulnerability, which is similar to the one exploited in Chrome as a zero-day, could allow a sandbox escape.The flaw impacted Firefox and Firefox ESR, and was fixed in versions 136.0.4, 115.21.1, and 128.8.1.Mozilla is not aware of any active attacks exploiting the vulnerability at this time.