CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Chrome for Windows Mojo IPC Handle Validation Sandbox Escape Vulnerability (CVE-2025-2783)
[Affected Scope] Google Chrome on Windows prior to version 134.0.6998.177
[Impact] A remote attacker can exploit incorrect handle validation in the Mojo IPC framework via a malicious file to escape the browser sandbox and execute arbitrary code with elevated privileges
[Mitigation] Immediately update Google Chrome to the latest stable channel (134.0.6998.177 or higher) and enforce auto-updates via Group Policy (GPO)
Google Chrome Mojo IPC Insufficient Data Validation Sandbox Escape Vulnerability (CVE-2022-3075)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 105.0.5195.102
[Impact] A remote attacker who has compromised the renderer process can bypass the browser sandbox and potentially execute arbitrary code on the host system via crafted Mojo IPC messages
[Mitigation] Immediately update Google Chrome and all Chromium-based browsers to version 105.0.5195.102 or later