{"id":"CVE-2025-2783","aliases":["ALPINE-CVE-2025-2783","EUVD-2025-8225","GHSA-hfqm-jfc6-rh2f","openSUSE-SU-2025:0111-1","openSUSE-SU-2025:14961-1","openSUSE-SU-2025:15531-1"],"status":"published","title":"Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior...","description":"Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)","severity":{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-09","score":0.09238,"percentile":0.95387,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"published":"2025-03-26T16:07:51Z","modified":"2026-11-03T06:32:51Z","kev":{"date_added":"2025-03-27","due_date":"2025-04-17","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2025-03-27"},{"source":"kev","since":"2025-03-27"}],"exploits":[{"source":"pocgithub","id":"Alchemist3dot14/CVE-2025-2783","title":"Alchemist3dot14/CVE-2025-2783","date":"2025-04-06","url":"https://github.com/Alchemist3dot14/CVE-2025-2783"},{"source":"pocgithub","id":"byteReaper77/CVE-2025-2783","title":"byteReaper77/CVE-2025-2783","date":"2025-06-15","url":"https://github.com/byteReaper77/CVE-2025-2783"},{"source":"exploitdb","id":"EDB-52403","title":"Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape","type":"webapps","platform":"windows","date":"2025-08-11","url":"https://www.exploit-db.com/exploits/52403"},{"source":"pocgithub","id":"bjrjk/CVE-2025-2783","title":"bjrjk/CVE-2025-2783","date":"2026-05-08","url":"https://github.com/bjrjk/CVE-2025-2783"},{"source":"pocgithub","id":"ElianGonzi00/CVE-2025-2783","title":"ElianGonzi00/CVE-2025-2783","date":"2026-06-15","url":"https://github.com/ElianGonzi00/CVE-2025-2783"},{"source":"pocgithub","id":"razureink/cve-2025-2783-chrome_sandbox_escape_reproduction","title":"razureink/cve-2025-2783-chrome_sandbox_escape_reproduction","date":"2026-07-23","url":"https://github.com/razureink/cve-2025-2783-chrome_sandbox_escape_reproduction"}],"fixes":[{"ecosystem":"Alpine:v3.21","package":"qt5-qtwebengine","fixed_in":["5.15.17-r7"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qt5-qtwebengine","fixed_in":["5.15.17-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt5-qtwebengine","fixed_in":["5.15.17-r10"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","fixed_in":["6.8.2-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","fixed_in":["6.8.2-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","fixed_in":["6.8.2-r3"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.6 NonFree","package":"opera","fixed_in":["117.0.5408.163-lp156.2.32.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.21","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.17-r7"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.17-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.17-r10"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-r3"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.6 NonFree","package":"opera","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"117.0.5408.163-lp156.2.32.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"128.9.0-1.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"libqt5-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.19-1.1"}]}],"bundled":16}],"products":[{"vendor":"google","product":"chrome"},{"vendor":"google","product":"chromium mojo"}],"references":[{"url":"https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html","tags":["Release Notes"]},{"url":"https://issues.chromium.org/issues/405143032","tags":["Permissions Required"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-2783","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-2783"},{"url":"https://github.com/advisories/GHSA-hfqm-jfc6-rh2f"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-2783","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/SJEX6ZT5W5GYLZEQIA7L2J32HG4KGMAX/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2783","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3WBRCQJYFKUAGSQ5SHW67JST3P5FSU4D/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2857","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3028","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3029","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3030","tags":["web"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10229","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-10827","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-11477","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-12694","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-55549","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0436","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0762","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0999","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-1919","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-2136","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24201","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-24855","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-3619","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2025-2783","description":"Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)","status":"published","published":"2025-03-26T16:07:51.034Z","modified":"2026-02-26T19:09:11.033Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"adp"}],"updated_at":"2026-11-02T14:32:38.70481Z"}],"euvd":[{"id":"EUVD-2025-8225","description":"Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)","status":"published","published":"2025-03-26T16:07:51Z","modified":"2026-02-26T19:09:11Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"exploited_since":"2025-03-27","updated_at":"2026-11-02T19:48:15.753271Z"}],"ghsa":[{"id":"GHSA-hfqm-jfc6-rh2f","title":"Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior...","description":"Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)","status":"published","published":"2025-03-26T18:30:50Z","modified":"2025-10-22T00:34:20Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:04:09.266545Z"}],"kev":[{"id":"CVE-2025-2783","title":"Google Chromium Mojo Sandbox Escape Vulnerability","description":"Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.","kev":{"date_added":"2025-03-27","due_date":"2025-04-17","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:15.999436Z"}],"nvd":[{"id":"CVE-2025-2783","description":"Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)","status":"published","published":"2025-03-26T16:15:23.693Z","modified":"2026-06-17T09:07:37.023Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"updated_at":"2026-11-02T14:10:55.858901Z"}],"osv":[{"id":"ALPINE-CVE-2025-2783","description":"Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)","status":"published","published":"2025-03-26T16:15:23.693Z","modified":"2026-11-03T06:32:51.180317682Z","cvss":[{"version":"3.1","score":8.3,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:16:46.202932Z"},{"id":"openSUSE-SU-2025:0111-1","title":"Security update for opera","description":"This update for opera fixes the following issues:\n\n- Update to 117.0.5408.163\n  * DNA-120683 [Issue back] Sometimes onboarding is blank\n    and useless\n  * DNA-121682 Backport fix for CVE-2025-2783 to O132, O133,\n    GX132 and Air132\n- Changes in 117.0.5408.154\n  * DNA-121210 After enabling tab scrolling, the tab bar narrows\n    on both the left and right sides\n  * DNA-121560 Extension updates which requires manual\n    confirmation do not work\n- Changes in 117.0.5408.142\n  * DNA-121314 Use the extra palette color to paint the frame\n  * DNA-121321 Refactor ColorSet struct\n  * DNA-121444 Crash at opera::VibesServiceImpl::VibesServiceImpl\n  * DNA-121477 Add unit tests for ColorSet\n  * DNA-121488 [ASAN] ColorSetTest.DefaultConstructor fails\n- Changes in 117.0.5408.93\n  * DNA-118548 After pressing Ctrl+F / Cmd+F on the Start Page \n    (SP), the focus should be on the search bar\n  * DNA-121183 Add 'transparent UI' parameter to Vibe logic\n  * DNA-121184 Allow to specify extra palette for window\n    background in Vibe logic\n  * DNA-121232 Enable Slack, Discord and Bluesky flag on\n    all streams\n  * DNA-121237 Crash at opera::SidebarExpandViewEmbedder::Position\n  * DNA-121322 [Opera Translate] [Redesign] Expired #translator\n    flag\n  * DNA-121385 Remove 'passkey' string\n\n- Update to 117.0.5408.53\n  * DNA-120848 Add 'x' button to close/dismiss translate popup\n  * DNA-120849 Dismissing popup adds language to never translate\n    from list\n  * DNA-120951 Optimize MFSVE output handling\n  * DNA-120972 Crash at TabDesktopMediaList::Refresh\n  * CHR-9964 Update Chromium on desktop-stable-132-5408 to\n    132.0.6834.210\nChanges in 117.0.5408.47\n  * CHR-9961 Update Chromium on desktop-stable-132-5408 to\n    132.0.6834.209\n","status":"published","published":"2025-03-31T22:46:48Z","modified":"2026-02-04T03:42:49.342554Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14961-1","title":"firefox-esr-128.9.0-1.1 on GA media","description":"These are all security issues fixed in the firefox-esr-128.9.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-04-03T00:00:00Z","modified":"2026-02-04T03:58:28.19376Z","updated_at":"2026-11-02T16:58:37.399567Z"},{"id":"openSUSE-SU-2025:15531-1","title":"libQt5Pdf5-5.15.19-1.1 on GA media","description":"These are all security issues fixed in the libQt5Pdf5-5.15.19-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-09-06T00:00:00Z","modified":"2026-03-23T04:53:54.047811Z","updated_at":"2026-11-02T16:58:37.810934Z"}]}}