high8.3Known exploitedPublic exploit code
CVE-2025-2783
Google Chromium Mojo Sandbox Escape Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2025-03-27. Federal due date: 2025-04-17.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape2025-08-11 · webapps · windows
Impact
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | before 134.0.6998.177 |