CefSharp affected by incorrect handle provided in unspecified circumstances in Mojo on Windows

높음 8.3GHSA-f87w-3j5w-v58p · Published 12/04/2025 · updated 12/04/2025

요약

GHSA-f87w-3j5w-v58p은(는) CefSharp.OffScreen, CefSharp.OffScreen.NetCore, CefSharp.WinForms에 영향을 주는 높음 (CVSS 8.3) 취약점입니다.
조치: 134.3.90 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
CefSharp.OffScreen NuGet	`< 134.3.90`	`134.3.90`
CefSharp.OffScreen.NetCore NuGet	`< 134.3.90`	`134.3.90`
CefSharp.WinForms NuGet	`< 134.3.90`	`134.3.90`
CefSharp.WinForms.NetCore NuGet	`< 134.3.90`	`134.3.90`
CefSharp.Wpf NuGet	`< 134.3.90`	`134.3.90`
CefSharp.Wpf.HwndHost NuGet	`< 134.3.90`	`134.3.90`
CefSharp.Wpf.NetCore NuGet	`< 134.3.90`	`134.3.90`

Description

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)

https://nvd.nist.gov/vuln/detail/CVE-2025-2783 https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html https://issues.chromium.org/issues/405143032

References

cefsharp/CefSharp security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2025-2783 · ADVISORY
chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html · WEB
cefsharp/CefSharp · PACKAGE
cefsharp/CefSharp release v134.3.90 · WEB
issues.chromium.org/issues/405143032 · WEB

CefSharp.OffScreen의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free