CVE-2025-2783

SandBoxEscapeSim CVE-2025-2783: Chrome向け教育用サンドボックスエスケープシミュレーション 作成者: Byte Reaper @ByteReaper0 概要 このプロジェクトは、Google Chrome（バージョン134.0.6998.177）におけるサンドボックスエスケープ脆弱性の概念を実証するための研究志向 かつ教育用シミュレーション です。Mojo IPCシステムを介した不適切なハンドル検証を利用して、悪意ある攻撃者がブラウザのサンドボックスを突破し、制限されたリソースにアクセスしようとする方法を説明します。 注記:...

CVE-2025-2783

CVE-2025-2783 CVE-2025-2783 のシミュレーションポック PoC — Chrome の Mojo IPC におけるサンドボックス脱出脆弱性。フィッシング配信、メモリファジング、IPC シミュレーション、ログ記録を含みます。レッドチームデモ、検知エンジニアリング、教育目的で安全に使用できます。 このプロジェクトは、CVE-2025-2783（Google Chrome の Mojo IPC フレームワークにおける脆弱性で、Windows システム上でサンドボックス脱出とローカルコード実行を可能にしたもの）の安全で教育目的の概念実証シミュレーションです。 ⚠️...

cve-2025-2783-chrome_sandbox_escape_reproduction

CVE-2025-2783：Google Chrome Mojo 沙箱逃逸 CVSS 评分： 8.3（高危） 发现者： Kaspersky 状态： 已在野外被积极利用（间谍活动） 概述 CVE-2025-2783 是 Google Chrome 的 Mojo 进程间通信（IPC）框架中的一个 Windows 特定权限提升漏洞。它通过利用 Mojo 消息传递层中不正确的句柄处理方式，允许被攻破的渲染器进程逃逸 Chrome 沙箱。 该 CVE 是作为针对记者和反对派人物的活跃利用链的一部分被发现的。该沙箱逃逸漏洞与另一个独立的渲染器远程代码执行（RCE）漏洞配合使用，以实现对系统的完全控制...

Astra Linux – Vulnerability in Chromium

The use of “after free” in Mojo IPC in Google Chrome before version 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Fedora 43 : cef (2025-1e8f05e0a6)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-1e8f05e0a6 advisory. Update to 140.1.15^chromium140.0.7339.207 rhbz2396308 CVE-2025-10890: Side-channel information leakage in V8 CVE-2025-10891: Integer overflow in V8...

EUVD-2022-51782

Malicious code in bioql PyPI...

Exploit for CVE-2025-2783

CVE-2025-2783 Simulated PoC for CVE-2025-2783 — a sandbox esca...

ROS-20240328-08

A vulnerability in the WebRTC technology of Google Chrome browser is related to the use of memory after its freeing. Exploitation of the vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service using specially crafted malware. arbitrary code or cause a...

ROS-20231114-01

A vulnerability in the Blink Media component of the Google Chrome browser is related to memory usage after it has been after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code A vulnerability in the Blink Frames component of Goog...

PT-2023-7331 · Google +5 · Mojo Ipc +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.199 Microsoft Edge versions affected versions not specified Description: The issue is related to a use after free vulnerability in the Mojo IPC library, which can be exploited by a remote attacker to...

SUSE CVE-2022-4437

Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

KLA20199 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Mojo IPC can be exploited to cause denial of service or execute...

Chromium: CVE-2022-4437 Use after free in Mojo IPC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

OPENSUSE-SU-2022:10245-1 Security update for chromium

This update for chromium fixes the following issues: Update to version 108.0.5359.124 boo1206403: - CVE-2022-4436: Use after free in Blink Media - CVE-2022-4437: Use after free in Mojo IPC - CVE-2022-4438: Use after free in Blink Frames - CVE-2022-4439: Use after free in Aura - CVE-2022-4440: Use...

KLA20144 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Blink Media can be exploited to cause denial of service o...

Debian DSA-5302-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5302 advisory. Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. For the...

CVE-2022-4437

Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2022-4437

Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2022-4437

Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2022-4437

Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...