CVE-2025-2783: Google Chromium Mojo Sandbox Escape Vulnerability

High severity, CVSS 8.3. Actively exploited: in CISA KEV since 2025-03-27. EPSS: 9.2% chance of exploitation in the next 30 days.

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)

Affected products

• Google Chrome: before 134.0.6998.177 (fixed in 134.0.6998.177)

Published 2025-03-26. Last modified 2026-06-17.