CefSharp affected by incorrect handle provided in unspecified circumstances in Mojo on Windows

ALTO 8.3GHSA-f87w-3j5w-v58p · Published 12/04/2025 · updated 12/04/2025

En resumen

GHSA-f87w-3j5w-v58p es una vulnerabilidad ALTO (CVSS 8.3) que afecta a CefSharp.OffScreen, CefSharp.OffScreen.NetCore, CefSharp.WinForms.
Solución: actualizar a 134.3.90 o posterior.

Package	Affected versions	Patched versions
CefSharp.OffScreen NuGet	`< 134.3.90`	`134.3.90`
CefSharp.OffScreen.NetCore NuGet	`< 134.3.90`	`134.3.90`
CefSharp.WinForms NuGet	`< 134.3.90`	`134.3.90`
CefSharp.WinForms.NetCore NuGet	`< 134.3.90`	`134.3.90`
CefSharp.Wpf NuGet	`< 134.3.90`	`134.3.90`
CefSharp.Wpf.HwndHost NuGet	`< 134.3.90`	`134.3.90`
CefSharp.Wpf.NetCore NuGet	`< 134.3.90`	`134.3.90`

Description

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)

https://nvd.nist.gov/vuln/detail/CVE-2025-2783 https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html https://issues.chromium.org/issues/405143032

References

cefsharp/CefSharp security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2025-2783 · ADVISORY
chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html · WEB
cefsharp/CefSharp · PACKAGE
cefsharp/CefSharp release v134.3.90 · WEB
issues.chromium.org/issues/405143032 · WEB

Más vulnerabilidades de CefSharp.OffScreen

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free