CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2025-27838.3/HIGHEPSS 9.2%CISA KEV
2025-03-26

Google Chrome for Windows Mojo IPC Handle Validation Sandbox Escape Vulnerability (CVE-2025-2783)

[Affected Scope] Google Chrome on Windows prior to version 134.0.6998.177

[Impact] A remote attacker can exploit incorrect handle validation in the Mojo IPC framework via a malicious file to escape the browser sandbox and execute arbitrary code with elevated privileges

[Mitigation] Immediately update Google Chrome to the latest stable channel (134.0.6998.177 or higher) and enforce auto-updates via Group Policy (GPO)

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse