CVE-2025-3032 involves leaking file descriptors from the fork server to web content processes in Mozilla Firefox and Thunderbird. This leakage could enable privilege escalation attacks by exposing file descriptors that should not be accessible to web content. The vulnerability was fixed in Firefox 137 and Thunderbird 137 as part of a security update addressing multiple issues. The CVSS 3.1 base score is 7.4 (AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N), reflecting network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, and high impact on confidentiality and integrity.

Successful exploitation of this vulnerability could allow an attacker to escalate privileges by leveraging leaked file descriptors from the fork server to web content processes. This could compromise the confidentiality and integrity of the affected system. However, there are no reports of known exploits in the wild at this time.

This vulnerability has been fixed in Mozilla Firefox 137 and Thunderbird 137. Users and administrators should update to these versions or later to remediate the issue. No additional mitigation actions are required beyond applying the official updates.