CVE-2025-2783

HIGH KEV

Mojo in Google Chrome <134.0.6998.177 - RCE

Title source: llm

Description

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)

Exploits (5)

exploitdb WORKING POC
by nu11secur1ty · textwebappswindows
https://www.exploit-db.com/exploits/52403
nomisec WORKING POC 30 stars
by Alchemist3dot14 · poc
https://github.com/Alchemist3dot14/CVE-2025-2783
github SUSPICIOUS 13 stars
by Leviticus-Triage · pythonpoc
https://github.com/Leviticus-Triage/ChromSploit-Framework
nomisec WORKING POC 6 stars
by byteReaper77 · poc
https://github.com/byteReaper77/CVE-2025-2783
nomisec WORKING POC
by aronfour · client-side
https://github.com/aronfour/CVE-2025-2783

Scores

CVSS v3 8.3
EPSS 0.3948
EPSS Percentile 97.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Details

CISA KEV 2025-03-27
VulnCheck KEV 2025-03-25
ENISA EUVD EUVD-2025-8225
Status published
Products (1)
google/chrome < 134.0.6998.177
Published Mar 26, 2025
KEV Added Mar 27, 2025
Tracked Since Feb 18, 2026