Description
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Chrome | 134.0.6998.177 – < 134.0.6998.177 | 134.0.6998.177 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | firefox-esr | 128.9.0-1.1 | openSUSE-SU-2025:14961-1 |
| openSUSE Tumbleweed | libqt5-qtwebengine | 5.15.19-1.1 | openSUSE-SU-2025:15531-1 |
| openSUSE Leap 15.6 | opera | 117.0.5408.163-lp156.2.32.1 | openSUSE-SU-2025:0111-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | qt6-qtwebengine | 6.8.2-r3 | — |
| Alpine v3.23 | qt5-qtwebengine | 5.15.17-r10 | — |
| Alpine v3.23 | qt6-qtwebengine | 6.8.2-r3 | — |
| Alpine v3.22 | qt5-qtwebengine | 5.15.17-r10 | — |
| Alpine v3.22 | qt6-qtwebengine | 6.8.2-r3 | — |
| Alpine v3.21 | qt5-qtwebengine | 5.15.17-r7 | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Microsoft Edge Renderer Process (Mojo IPC) 134.0.6998.177 - Sandbox Escape EDB-52403 · webapps · Aug 11, 2025
GitHub 6 repositories
-
Alchemist3dot14/CVE-2025-2783 ★ 33 · Apr 6, 2025
Simulated PoC for CVE-2025-2783 — a sandbox escape vulnerability in Chrome's Mojo IPC. Includes phishing delivery, memory fuzzing, IPC simulation, and logging. Safe for red team demos, detection engi…
-
byteReaper77/CVE-2025-2783 ★ 8 · Jun 15, 2025
This project is a research-oriented and educational simulation designed to demonstrate the concept of a sandbox escape vulnerability within Google Chrome (version 134.0.6998.177), leveraging improper…
-
ElianGonzi00/CVE-2025-2783 ★ 1 · Jun 15, 2026
-
bjrjk/CVE-2025-2783 ★ 1 · May 8, 2026
Full-chain exploit for CVE-2025-2783 (Ipcz Sandbox Escape & RCE).
-
dexteon/cve-2025-2783-poc ★ 0 · Nov 12, 2026
Research notes for cve-2025-2783-poc
-
razureink/cve-2025-2783-chrome_sandbox_escape_reproduction ★ 0 · Jul 23, 2026
CVE Reproduction: cve-2025-2783-chrome_sandbox_escape_reproduction
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 9
- openSUSE-SU-2025:15531-1 libQt5Pdf5-5.15.19-1.1 on GA media SUSE / openSUSE Security Updates · Mar 23, 2026
- ICSA-26-043-03 Siemens COMOS CISA ICS & IT advisories · Mar 12, 2026
- SSA-212953 SSA-212953: Multiple Vulnerabilities in COMOS Siemens ProductCERT · Mar 10, 2026
- openSUSE-SU-2025:14961-1 firefox-esr-128.9.0-1.1 on GA media SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2025:0111-1 Security update for opera SUSE / openSUSE Security Updates · Feb 4, 2026
- NCSC-2025-0382 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Dec 9, 2025
- WID-SEC-2025-2456 Jabra Direct: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Oct 30, 2025
- WID-SEC-2025-0641 Google Chrome/Microsoft Edge: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · May 21, 2025
- NCSC-2025-0098 Kwetsbaarheid verholpen in Google Chrome NCSC-NL (Netherlands) · Mar 26, 2025