{"id":"CVE-2025-2783","kind":"vulnerability","aliases":["CVE-2025-2783"],"related":[],"title":"Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177…","description":"Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.\n\nCISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","summary":"Google Chromium's Mojo inter-process communication layer on Windows has a logic error where an incorrect handle is provided in unspecified circumstances, letting code break out of the browser sandbox. Attackers exploit it in the wild, and it can affect Chromium-based browsers such as Chrome, Edge and Opera.","severity":"high","cvss":8.3,"epss":null,"exploited":true,"exploited_at":"2025-03-27T00:00:00+00:00","products":[{"name":"Google Chromium Mojo","fixed":[],"affected":"","ecosystem":"vendor"},{"name":"google chrome","fixed":["134.0.6998.177"],"affected":"< 134.0.6998.177","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["chrome","chromium","edge","exploited","opera","runtime","windows"],"not_affected_if":["fully-patched-browsers","non-windows-platforms"],"how_to_check":"Check the browser version under Help/About in Chrome, Edge or Opera on Windows and compare it with the fixed release in the vendor advisory.","fix":"Update Google Chrome, Microsoft Edge and other Chromium-based browsers to the patched release named in the vendor advisory.\nCISA says to apply vendor mitigations, or discontinue use of the product if mitigations are unavailable.","status":"open","published_at":"2025-03-26T16:15:23+00:00","first_seen_at":"2026-10-23T19:11:51+00:00","triaged_at":"2026-10-23T20:48:54+00:00","updated_at":"2026-10-23T22:29:05+00:00","category":"runtime","confidence":0.6,"triage":{"at":"2026-10-23T20:48:54Z","model":"claude-haiku-5-5","output":{"fix":"Update Google Chrome, Microsoft Edge and other Chromium-based browsers to the patched release named in the vendor advisory.\nCISA says to apply vendor mitigations, or discontinue use of the product if mitigations are unavailable.","reach":"internet","summary":"Google Chromium's Mojo inter-process communication layer on Windows has a logic error where an incorrect handle is provided in unspecified circumstances, letting code break out of the browser sandbox. Attackers exploit it in the wild, and it can affect Chromium-based browsers such as Chrome, Edge and Opera.","category":"runtime","who_cares":["windows","chromium","chrome","edge","opera"],"confidence":0.6,"needs_auth":"unknown","worst_case":"Attacker escapes browser sandbox and runs code with the user's Windows privileges.","analyst_note":"Find the fixed Chromium version and vendor advisory from the CISA KEV entry or Chrome release notes; the sources do not name affected or fixed versions.","how_to_check":"Check the browser version under Help/About in Chrome, Edge or Opera on Windows and compare it with the fixed release in the vendor advisory.\nunknown","needs_analyst":true,"not_affected_if":["non-windows-platforms","fully-patched-browsers"],"user_interaction":"yes","needs_special_setup":"no","severity_if_unknown":"high"},"cost_usd":0.000502,"input_tokens":2596,"output_tokens":485,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-01':146C '-2025':18A,21A '-2783':19A,22A '134.0.6998.177':16A '22':145C 'action':136C 'affect':76B,116C 'appli':137C 'applic':143C 'attack':67B 'base':79B 'bod':144C 'break':61B 'browser':65B,80B,119C 'caus':97C 'chrome':11A,27A,28B,83B,129C 'chromium':24A,29B,36B,78B,88C,122C 'chromium-bas':77B 'circumst':6A,58B,112C 'cisa':134C 'cloud':149C 'code':60B 'communic':42B 'contain':92C 'could':115C 'cve':17A,20A 'discontinu':152C 'edg':30B,84B,131C 'error':49B,101C 'escap':95C 'exploit':31B,68B 'follow':142C 'googl':10A,35B,87C,128C 'google':23A,26A 'guidanc':147C 'handl':2A,53B,107C 'includ':123C 'incorrect':1A,52B,106C 'instruct':141C 'inter':40B 'inter-process':39B 'layer':43B 'let':59B 'limit':126C 'logic':48B,100C 'microsoft':130C 'mitig':138C,158C 'mojo':8A,25A,38B,89C 'multipl':117C 'opera':32B,86B,133C 'per':139C 'prior':14A 'process':41B 'product':156C 'provid':3A,55B,109C 'requir':135C 'result':103C 'runtim':33B 'sandbox':66B,94C 'servic':150C 'unavail':160C 'unspecifi':5A,57B,111C 'use':153C 'util':121C 'vendor':140C 'vulner':96C,114C 'web':118C 'wild':72B 'window':13A,34B,45B,91C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2025-03-26T16:15:23+00:00","kev":{"dateAdded":"2025-03-27","dueDate":"2025-04-17","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","cvss_by":"134c704f-9b21-4f2e-91b3-4a467353bcc0","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2025-2783","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-2783","severity":null,"published_at":"2025-03-27T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:51+00:00","fetched_at":"2026-10-25T17:39:55+00:00","note":null},{"source":"nvd","external_id":"CVE-2025-2783","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2783","severity":null,"published_at":"2025-03-26T16:15:23+00:00","modified_at":"2026-06-17T09:07:37+00:00","first_seen_at":"2026-10-23T22:29:05+00:00","fetched_at":"2026-10-23T22:29:05+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}