Summary
Google Chromium Mojo on Windows contains a sandbox escape vulnerability caused by a logic error, which results from an incorrect handle being provided in unspecified circumstances. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
- Vendor
- Product
- Chromium Mojo
- Added to KEV
- Mar 27, 2025
- Remediation due
- Apr 17, 2025 (US federal deadline)
- Ransomware use
- Not known
- EPSS
- 9.2% as of Nov 12
In the news
- No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
- none recorded
References