VULNERABILITY INTELLIGENCE
CVE-2025-2783
CVSS score8.3 HIGH
EPSS probability9.24%
CISA KEVKnown exploited vulnerability
Published2025-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Known Exploited Vulnerability
Google Chromium Mojo Sandbox Escape Vulnerability
Vendor / product: Google / Chromium Mojo
Description
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)
Weakness classification
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- chrome-cve-admin@google.com — Release Notes
- chrome-cve-admin@google.com — Permissions Required
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource