← Back to CVE List
Vulnerability Analysis

CVE-2025-2783

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)

CISA KEV
CVSS Base Score
8.3
HIGH
Exploitability:1.7
Impact Score:6.1
Temporal Score:-
EPSS:8.56%

Threat Intelligence Signals

CISA KEV
YES
KEV Date Added
2025-03-27
Ransomware Use
Unknown
KEV Due Date
2025-04-17
VulnCheck In-the-Wild
No
Nuclei Template
No
EPSS Score
8.557%
EPSS Percentile
94.4th pct
GitHub Severity
HIGH
SSVC Exploitation
SSVC Automatable
Vulnerability Class

Identity & Timeline

Status-
Assigning Authority-
CVSS Version / Source-
Reserved-
Published-
Patch Date (date_public)-
Exploit DB Date-
First GitHub PoC Date-
Last Updated-
Time to Patch (Days to fix)-
Exploit Release Gap-
PoC Release Gap-
Exploit DB ReferencesNone identified

Affected Products & Versions

Vendor Product Affected Versions
No affected products specified.

References

No reference links found.

LINK COPIED TO CLIPBOARD