CVE-2025-2783CISA KEV
Google Chromium Mojo Sandbox Escape Vulnerability
CISA lists this Google Chromium Mojo vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
- Product
- Chromium Mojo
- Added to KEV
- 27 Mar 2025
- Federal remediation due
- 17 Apr 2025
- Known ransomware use
- Not reported