cve-2025-2783-chrome_sandbox_escape_reproduction

CVE-2025-2783: Google Chrome Mojo 샌드박스 탈출 CVSS 점수: 8.3 높음 발견자: Kaspersky 상태: 실제 환경에서 적극적으로 악용됨 스파이 캠페인 개요 CVE-2025-2783는 Google Chrome의 Mojo 프로세스 간 통신IPC 프레임워크에서 발견된 Windows 전용 권한 상승 취약점입니다. 이 취약점은 Mojo 메시지 전달 계층의 잘못된 핸들 처리를 악용하여 손상된 렌더러 프로세스가 Chrome 샌드박스를 탈출할 수 있게 합니다. 이 CVE는 언론인과 반대파 인사를 노리는 활발...

mojo-v

Mojo-V: RISC-V를 위한 비밀 연산 Mojo-V 발음: “mojo-five”는 RISC-V를 위한 새로운 RISC-V 확장으로, 개인정보 보호 지향 프로그래밍 기능을 도입합니다. Mojo-V는 비밀 연산secret computation을 구현하여 취약한 소프트웨어와 프로그래머 신뢰에 의존하지 않고도 안전하고 효율적이며 데이터 비노출data-oblivious 실행을 가능하게 합니다. 민감한 데이터를 전용 비밀 레지스터에 격리하고 제3자 키로 메모리를 암호화함으로써, Mojo-V는 정보 노출을 방지하고 직접적인 노출이...

mojo-v

Mojo-V: Secret Computation for RISC-V Mojo-V pronounced “mojo-five” is a new RISC-V extension that introduces privacy-oriented programming capabilities for RISC-V. Mojo-V implements secret computation, enabling secure, efficient, and data-oblivious execution without reliance on fragile software a...

CVE-2026-68914

Mojolicious (Perl real-time web framework) versions prior to 9.47 contain a vulnerability in the pure-Perl implementation of Mojo::JSON , which fails to enforce a nesting depth limit when Cpanel::JSON::XS is unavailable or MOJO_NO_JSON_XS is enabled. An attacker who can supply untrusted JSON to d...

CVE-2025-2783

SandBoxEscapeSim CVE-2025-2783: Chrome向け教育用サンドボックスエスケープシミュレーション 作成者: Byte Reaper @ByteReaper0 概要 このプロジェクトは、Google Chrome（バージョン134.0.6998.177）におけるサンドボックスエスケープ脆弱性の概念を実証するための研究志向 かつ教育用シミュレーション です。Mojo IPCシステムを介した不適切なハンドル検証を利用して、悪意ある攻撃者がブラウザのサンドボックスを突破し、制限されたリソースにアクセスしようとする方法を説明します。 注記:...

Astra Linux – Vulnerability in Chromium

Integer overflow in Mojo in Google Chrome prior to version 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape through a crafted HTML page...

CVE-2025-2783

CVE-2025-2783 Симулированный PoC для CVE-2025-2783 — уязвимость песочницы в Mojo IPC Chrome. Включает фишинговую доставку, фаззинг памяти, имитацию IPC и ведение журнала. Безопасно для демонстраций Red Team, разработки систем обнаружения и образовательных целей. Этот проект реализует безопасную и...

Astra Linux – Vulnerability in Chromium

The incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 136.0.7103.113 allowed a remote attacker to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Mojo in Google Chrome on Android, Linux, and ChromeOS before version 140.0.7339.127 allowed a remote attacker to bypass site isolation through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Mojo in Google Chrome prior to version 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Astra Linux – Vulnerability in Chromium

The use of Mojo after free in Google Chrome before version 121.0.6167.160 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Mojo in Google Chrome prior to version 105.0.5195.102 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Astra Linux – Vulnerability in Chromium

Integer overflow in Mojo in Google Chrome prior to version 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

The use of Mojo after free in Google Chrome before version 108.0.5359.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of Mojo after free in Google Chrome before version 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

In Mojo within Google Chrome, before version 99.0.4844.51, unauthorized memory access allowed a remote attacker to perform an out-of-bounds memory write through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

The use of Mojo with “after free” in Google Chrome before version 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Insufficient data validation in Mojo in Google Chrome prior to 129.0.6668.89 allowed a remote attacker who had compromised the renderer process to perform an out-of-bounds memory write via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 115.0.5790.98, out-of-bounds memory access in Mojo within Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of Mojo after free in Google Chrome before version 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...