CVE-2025-2783: Google Chromium Mojo Sandbox Escape Vulnerability. Google

Google Chromium Mojo Sandbox Escape Vulnerability. Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

• CISA KEV-listed (remediation due 2025-04-17)
• EPSS 8.4% (94.5% percentile)
• CVSS 8.3 high

Related briefings

• Google Patches Two Chrome Zero-Days Exploited in the Wild — Skia and V8 Under Active Attack 2026-03-15

Linked threat actors

• Team46
• Operation ForumTroll

Browse the CVE database

Read the full analysis on IntelFusions