CVE-2025-2783

Exploited in the Wild ✓ Confirmed 0-Day ★ Google Project Zero

Triaged: March 3, 2026 20 articles

VulnLookup ↗ NVD ↗ MITRE ↗ Advisory ↗ P0 Sheet ↗ CISA KEV ↗

EPSS Score

Source: FIRST.org · 2026-05-24

47.45%

probability

This CVE has a 47.45% probability of being exploited in the next 30 days.

0% Top 97.7th percentile of all CVEs 100%

CVSS score unavailable

Neither CIRCL nor NVD returned a CVSS score for this CVE. View on VulnerabilityLookup ↗

Description

Project Zero

Windows Chrome sandbox escape

Google Project Zero

Patched

March 25, 2025

Reported by

Boris Larin (@oct0xor) and Igor Kuznetsov (@2igosha) of Kaspersky

Root Cause Analysis

???

Exploits & PoC

Alchemist3dot14/CVE-2025-2783

Simulated PoC for CVE-2025-2783 — a sandbox escape vulnerability in Chrome's Mojo IPC. Includes phishing delivery, memory fuzzing, IPC simulation, and

byteReaper77/CVE-2025-2783

This project is a research-oriented and educational simulation designed to demonstrate the concept of a sandbox escape vulnerability within Google C

2 repos — triés par ⭐ Rechercher sur GitHub ↗

Siemens COMOS

CISA-Advisories Feb 12, 2026

Google patches sixth Chrome zero-day exploited in attacks this year

BleepingComputer Sep 18, 2025

Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks

TheHackerNews

Google fixes new Chrome zero-day flaw exploited in attacks

BleepingComputer Nov 18, 2025

CISA tags recently patched Chrome bug as actively exploited

BleepingComputer May 16, 2025

New Chrome Zero-Day Actively Exploited; Google Issues Emergency Out-of-Band Patch

TheHackerNews

Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw

TheHackerNews Dec 11, 2025

Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability

TheHackerNews Nov 18, 2025

Google fixes eighth Chrome zero-day exploited in attacks in 2025

BleepingComputer Dec 11, 2025

Google fixes fourth actively exploited Chrome zero-day of 2025

BleepingComputer Jul 01, 2025

Google patches new Chrome zero-day bug exploited in attacks

BleepingComputer Jun 03, 2025

Google fixes Chrome zero-day exploited in espionage campaign

BleepingComputer Mar 26, 2025

Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions

TheHackerNews

Urgent: Google Releases Critical Chrome Update for CVE-2025-6558 Exploit Active in the Wild

TheHackerNews

Chrome Zero-Day Exploited to Deliver Italian Memento Labs' LeetAgent Spyware

TheHackerNews Oct 28, 2025

⚡ Weekly Recap: Chrome 0-Day, IngressNightmare, Solar Bugs, DNS Tactics, and More

TheHackerNews

⚡ Weekly Recap: Nation-State Hacks, Spyware Alerts, Deepfake Malware, Supply Chain Backdoors

TheHackerNews

Italian spyware vendor linked to Chrome zero-day attacks

BleepingComputer Oct 27, 2025

Chrome Zero-Day CVE-2025-6554 Under Active Attack — Google Issues Security Update

TheHackerNews

New ForumTroll Phishing Attacks Target Russian Scholars Using Fake eLibrary Emails

TheHackerNews Dec 17, 2025

Signal Intelligence

Confidenceⓘ

92%

EPSS 47.45%

Mentions 20

Last Seen Feb 12, 2026

CNA Information

Analyst Note

CVE-2025-2783 is a high-severity sandbox escape vulnerability in Chrome's Mojo component with confirmed active exploitation in the wild, as evidenced by multiple reputable sources (BleepingComputer, TheHackerNews) reporting active attacks. The vulnerability has been patched by Google in version 134.0.6998.177, and Project Zero involvement further validates its legitimacy, warranting a CONFIRMED classification with high confidence.