CVE-2025-2783

8.3 highKEVEPSS 9.2%

High (8.3) in Google Chromium Mojo. In CISA KEV since 2025-03-27. EPSS 9.2% chance of exploitation in the next 30 days.

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)

Severity

CVSS 3.1

8.3 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

EPSS: 9.2% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CISA KEV: listed 2025-03-27, due 2025-04-17
Published: 2025-03-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

google:chrome

References

https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html
https://issues.chromium.org/issues/405143032
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2783

Check your stack JSON