CVE-2025-2783

HighKnown Exploited

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote…

Chrome·NVD-CWE-noinfo·Published 2025-03-26

CVSS

8.3

EPSS

0.09

KEV

Yes

Exploits

Attributed to:Operation ForumTroll Team46

cve.orgen

225 chars

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)

NVDen

225 chars

NVDes

287 chars

Un identificador incorrecto proporcionado en circunstancias no especificadas en Mojo en Google Chrome para Windows anterior a la versión 134.0.6998.177 permitió que un atacante remoto escapara de la zona protegida mediante un archivo malicioso. (Severidad de seguridad de Chromium: Alta)

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	8.3	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
3.1	Primary	cve.org	8.3	—	—	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
3.1	Secondary	NVD	8.3	1.6	6.0	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H