<h1>Chrome and Firefox Release Patches for Critical Security Flaws</h1>
<p>Google and Mozilla have released emergency patches to address critical vulnerabilities in their Chrome and Firefox browsers, respectively. These flaws were particularly concerning because they allowed attackers to bypass the browsers’ sandbox protections, posing significant security risks to users.</p>
<h2>Google Chrome Vulnerability</h2>
<p>Google’s security patch addresses CVE-2025-2783, a high-severity vulnerability in Chrome that was actively exploited by threat actors. The flaw was discovered by Kaspersky researchers and was used in advanced persistent threats targeting organizations in Russia. This espionage campaign, dubbed Operation ForumTroll, involved sophisticated phishing emails containing malicious links that led to personalized exploits. The attackers were able to bypass Chrome’s sandbox protection, making the vulnerability particularly dangerous. The attack aimed at espionage, strongly suggesting state sponsorship. Evidence also showed targeted campaigns against journalists and educational institutions, further highlighting the severity of the exploit.</p>
<h2>Mozilla Firefox Vulnerability</h2>
<p>Similarly, Mozilla issued a security update for Firefox, particularly the Windows version, to patch a critical bug (CVE-2025-2857) that was being exploited in the wild. This vulnerability bore similarities to the one recently fixed by Google in Chrome. The Firefox flaw also allowed attackers to escape the browser’s sandbox, increasing the risk of users’ systems being compromised. Mozilla promptly responded to the threat, ensuring the update also reached other browsers sharing the same codebase, like the Tor Browser.</p>
<h2>User Recommendations</h2>
<p>Users of Chrome and Firefox, as well as those using other Chromium-based browsers or the Tor browser, are strongly advised to apply the latest updates immediately to protect against these significant security threats. Both Google and Mozilla’s swift actions underscore the importance of keeping software up to date to mitigate potential risks from emerging vulnerabilities.</p>


Collections

Google and Mozilla have released emergency patches for their Chrome and Firefox browsers to address critical vulnerabilities that allowed attackers to bypass sandbox protections. Chrome's security issue, CVE-2025-2783, was actively exploited in an espionage campaign, while a similar flaw in Firefox also posed significant security risks. Users are strongly advised to update their browsers immediately to protect against these threats.

Google Releases Essential Patch for Critical Chrome Vulnerability Exploited in Russian Espionage Attacks