VULNERABILITY INTELLIGENCE

CVE-2025-4609

CVSS score9.6 CRITICAL

EPSS probability0.39%

CISA KEVNot currently listed

Published2025-08-22

Last modified2026-06-17

Description

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 136.0.7103.113 allowed a remote attacker to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)