CVE-2025-2783: listed in the CISA KEV catalog CVE-2025-2783 · CVSS 8.3 HIGH · EPSS 8% · KEV 2025-03-27
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)
Is CVE-2025-2783 exploited? Listed in the CISA KEV catalog on 2025-03-27. Federal remediation due 2025-04-17. Past that date by 485 days. EPSS puts exploitation in the next 30 days at 8%. Public exploit code: proof of concept. Which products and versions are affected? No affected package list recorded here yet.
Is there a patch? No patch identifier recorded here yet.
What PlainSec published about CVE-2025-2783 Primary sources What this record does not say No affected package data. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-08-15.
CVE-2025-2783: listed in the CISA KEV catalog CVE-2025-2783 · CVSS 8.3 HIGH · EPSS 8% · KEV 2025-03-27
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)
Is CVE-2025-2783 exploited? Listed in the CISA KEV catalog on 2025-03-27. Federal remediation due 2025-04-17. Past that date by 485 days. EPSS puts exploitation in the next 30 days at 8%. Public exploit code: proof of concept. Which products and versions are affected? No affected package list recorded here yet.
Is there a patch? No patch identifier recorded here yet.
What PlainSec published about CVE-2025-2783 Primary sources What this record does not say No affected package data. No patch identifier. KEV and EPSS are re-checked daily. Record last updated 2026-08-15.