CVE-2025-2783

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 2/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

CISA Known Exploited Vulnerability

Vendor / Product Google — Chromium Mojo
Date Added 2025-03-27
Remediation Due 2025-04-17
https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-2783

Bug Bounty Relevance

2 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

9.24%
Raw Score 0.092380
Percentile 95.3%
Date 2026-10-28

Intelligence Sources

kev ref →