Firefox fixes flaw similar to Chrome zero-day used against Russian organizations

Mozilla released a patch for a critical Firefox sandbox escape vulnerability (CVE-2025-2857) affecting Windows; there is currently no evidence it was exploited. Separately, researchers reported that a Chrome zero-day (CVE-2025-2783) had been used in an espionage campaign targeting Russian media and academic institutions, with Kaspersky calling the attack highly sophisticated and CISA adding the Chrome flaw to its Known Exploited Vulnerabilities catalog.