CVE-2025-2783 – Google Chromium Mojo Sandbox Escape Vulnerability

https://notcve.org/view.php?id=CVE-2025-2783

26 Mar 2025 — Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High) These are all security issues fixed in the firefox-esr-128.9.0-1.1 package on the GA media of openSUSE Tumbleweed. Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circu... • https://github.com/raulchung/CVE-2025-2783 •