Sandbox Escape

🗓️ 21 Apr 2025 09:21:26Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 11 Views

CefSharp has a vulnerability allowing sandbox escape via improper system resource handle management.

Reporter	Title	Published	Views	Family All 155
FreeBSD	electron{33,34} -- Incorrect handle provided in unspecified circumstances in Mojo	27 Mar 202500:00	–	freebsd
GithubExploit	Exploit for CVE-2025-2783	6 Apr 202503:49	–	githubexploit
GithubExploit	Exploit for CVE-2025-2783	1 Apr 202609:33	–	githubexploit
GithubExploit	Exploit for CVE-2025-2783	26 May 202512:51	–	githubexploit
ATTACKERKB	CVE-2025-2783	26 Mar 202500:00	–	attackerkb
AlpineLinux	CVE-2025-2783	26 Mar 202516:07	–	alpinelinux
AlpineLinux	CVE-2025-2857	27 Mar 202514:15	–	alpinelinux
Information Security Automation	June Linux Patch Wednesday	1 Jul 202511:28	–	avleonov
Information Security Automation	April Microsoft Patch Tuesday	10 Apr 202522:59	–	avleonov
Circl	CVE-2025-2783	25 Mar 202522:00	–	circl

Vulners

Node

qt5-qtwebengine qt5-qtwebengineMatch5.15.17-r1csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.15-r1csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.13-r1csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.17-r9csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r3csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.14.2-r0csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r4csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.14-r6csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220304-r1csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.14.1-r3csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220304-r2csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.17-r8csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20200401-r0csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r9csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.15-r7csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.14-r4csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.17-r5csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220121-r3csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220505-r0csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.15-r0csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.16-r0csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.16-r8csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.14-r7csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r2csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.12-r9csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220601-r2csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20200401-r1csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.13-r0csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.16-r1csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.17-r0csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.12-r8csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r7csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.14.1-r1csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r10csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.12-r6csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.12-r10csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.14-r1csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.15-r2csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.14-r5csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.17-r2csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.16-r6csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.16-r9csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.12-r2csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20210510-r1csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.15-r3csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.12-r0csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220304-r0csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.14-r2csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r0csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20200401-r2csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220121-r2csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.14.1-r2csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.17-r6csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20210510-r0csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.17-r4csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220601-r0csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220601-r1csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r13csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20200401-r3csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.3_git20220407-r1csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.17-r3csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.2-r4csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.11-r12csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.14-r0csharp

AND

qt5-qtwebengine qt5-qtwebengineMatch5.15.16-r7csharp

AND

alpinelinux alpine_linuxMatchedge

qt5-qtwebengine qt5-qtwebengineMatch5.15.17-r6csharp

AND

alpinelinux alpine_linuxMatch3.21

qt6-qtwebengine qt6-qtwebengineMatch6.7.2-r4csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.1-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.0-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.3-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.0-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.0-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.2-r2csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r3csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.7.2-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.3-r5csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.0-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.8.2-r2csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.3-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.3-r3csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.0-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.1-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.7.2-r5csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.7.2-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r4csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r2csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.0-r5csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.1-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.2-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.4-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r2csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.3-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.8.2-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.2-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.1-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.3-r2csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.1-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.2-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.8.2-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.2-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.3.1-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.0-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.8.0-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.7.2-r2csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.0-r2csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.2-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.8.1-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.2-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.2-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.1-r1csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.3-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.4.2-r5csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.5.1-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.3-r0csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.6.3-r4csharp

AND

qt6-qtwebengine qt6-qtwebengineMatch6.2.4-r0csharp

AND

alpinelinux alpine_linuxMatchedge

cefsharp.wpf.netcore cefsharp.wpf.netcoreRange87.1.130-pre–134.3.60csharp

cefsharp.wpf.hwndhost cefsharp.wpf.hwndhostRange83.4.20-pre–134.3.60csharp

cefsharp.offscreen cefsharp.offscreenRange37.0.0-pre01–134.3.60csharp

cefsharp.offscreen.netcore cefsharp.offscreen.netcoreRange87.1.130-pre–134.3.60csharp

cefsharp.winforms cefsharp.winformsRange1.25.3–134.3.60csharp

cefsharp.wpf cefsharp.wpfRange1.25.2-perlun0–134.3.60csharp

cefsharp.winforms.netcore cefsharp.winforms.netcoreRange87.1.130-pre–132.3.11csharp

Source	Link
chromereleases	www.chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html
github	www.github.com/cefsharp/CefSharp/commit/3cbb86d3127c49d8855450120bdca4bd65c146cf
github	www.github.com/cefsharp/CefSharp/releases/tag/v134.3.90
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
issues	www.issues.chromium.org/issues/405143032
github	www.github.com/cefsharp/CefSharp/security/advisories/GHSA-f87w-3j5w-v58p

29 Oct 2025 14:46Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.18.3

EPSS0.4686

SSVC