- 68/2025
- High
Google has released an updated Chrome version “134.0.6998.177/.178” for Windows to fix a zero-day vulnerability.
The addressed vulnerability could allow the remote attacker to bypass Chrome sandbox protections and infect systems with sophisticated malware.
Google Chrome Browser’s Sandbox Security Bypass (CVE-2025-2783):
- CVSS: 8.3
- Attack Vector: Network
- Attack Complexity: High
- Privileges Required: None
- User Interaction: Required
- Consequences: Bypass Security
It should be highlighted that Google is aware that the zero-day vulnerability “CVE-2025-2783” is being exploited in the wild.
Vulnerabilities
CVE-2025-2783
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.