VDB
BDU%3A2025-03258
BDU%3A2025-03258
PUBLISHED
CVSS 10 CRITICAL
Уязвимость компонента Mojo браузера Google Chrome для операционных систем Windows, позволяющая нарушителю обойти существующие ограничения безопасности и выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Google Inc, Microsoft Corp, Palo Alto Networks Inc. | Google Chrome, Microsoft Edge, Prisma Access Browser |
Timeline
- Mar 26, 2025 CVE Published
- Oct 27, 2025 CVE Updated
References
- https://www.kaspersky.ru/blog/forum-troll-apt-with-zero-day-vulnerability/39300/ url
- https://www.bleepingcomputer.com/news/security/google-fixes-chrome-zero-day-exploited-in-espionage-campaign/ url
- https://securityonline.info/cve-2025-2783-chrome-zero-day-exploited-in-state-sponsored-espionage-campaign/ url
- https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html?m=1 advisory
- https://securelist.ru/operation-forumtroll/112138/ url
- https://www.securitylab.ru/news/557705.php url
- https://finance.rambler.ru/money/54407942-0-day-v-chrome-ispolzovalas-v-apt-atakah-na-organizatsii-v-rossii/ url
- https://security.paloaltonetworks.com/PAN-SA-2025-0008 url