A critical vulnerability in Mojo within Google Chrome on Windows prior to version 136.0.7103.113 allows remote attackers to potentially escape the sandbox through a malicious file. This issue arises from an incorrect handle being provided in unspecified circumstances, posing a significant security risk.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.6 | CVE-2025-4609 |
Exploitation
To exploit this vulnerability, an attacker would need to craft a malicious file that, when opened by a user, could trigger the sandbox escape due to the incorrect handle in Mojo. The attack requires user interaction, as the user must open the malicious file for the exploit to succeed.
Affected Products
- Google Chrome on Windows: Vulnerable versions prior to 136.0.7103.113 are affected by this critical vulnerability.
Mitigation
Users are advised to update Google Chrome to the latest version to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities and exploits.