Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2025:0111-1 advisory.

    - Update to 117.0.5408.163
      * DNA-120683 [Issue back] Sometimes onboarding is blank         and useless
      * DNA-121682 Backport fix for CVE-2025-2783 to O132, O133,         GX132 and Air132
    - Changes in 117.0.5408.154
      * DNA-121210 After enabling tab scrolling, the tab bar narrows         on both the left and right sides
      * DNA-121560 Extension updates which requires manual         confirmation do not work
    - Changes in 117.0.5408.142
      * DNA-121314 Use the extra palette color to paint the frame
      * DNA-121321 Refactor ColorSet struct
      * DNA-121444 Crash at opera::VibesServiceImpl::VibesServiceImpl
      * DNA-121477 Add unit tests for ColorSet
      * DNA-121488 [ASAN] ColorSetTest.DefaultConstructor fails
    - Changes in 117.0.5408.93
      * DNA-118548 After pressing Ctrl+F / Cmd+F on the Start Page         (SP), the focus should be on the search bar
      * DNA-121183 Add 'transparent UI' parameter to Vibe logic
      * DNA-121184 Allow to specify extra palette for window         background in Vibe logic
      * DNA-121232 Enable Slack, Discord and Bluesky flag on         all streams
      * DNA-121237 Crash at opera::SidebarExpandViewEmbedder::Position
      * DNA-121322 [Opera Translate] [Redesign] Expired #translator         flag
      * DNA-121385 Remove 'passkey' string

    - Update to 117.0.5408.53
      * DNA-120848 Add 'x' button to close/dismiss translate popup
      * DNA-120849 Dismissing popup adds language to never translate         from list
      * DNA-120951 Optimize MFSVE output handling
      * DNA-120972 Crash at TabDesktopMediaList::Refresh
      * CHR-9964 Update Chromium on desktop-stable-132-5408 to         132.0.6834.210     Changes in 117.0.5408.47
      * CHR-9961 Update Chromium on desktop-stable-132-5408 to         132.0.6834.209

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 01a7e1e1-d249-4dd8-9a4a-ef95b5747afb advisory.

    Electron developers report:
    This update fixes the following vulnerability:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Microsoft Edge installed on the remote Windows host is prior to 134.0.3124.93. It is, therefore, affected by a vulnerability as referenced in the March 26, 2025 advisory.

  - Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to     134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium     security severity: High) (CVE-2025-2783)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Google Chrome installed on the remote Windows host is prior to 134.0.6998.177. It is, therefore, affected by a vulnerability as referenced in the 2025_03_stable-channel-update-for-desktop_25 advisory.

  - Incorrect handle provided in unspecified circumstances in Mojo on Windows. (CVE-2025-2783)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
233751	openSUSE 15 Security Update : opera (openSUSE-SU-2025:0111-1)	Nessus	SuSE Local Security Checks	high
233500	FreeBSD : electron{33,34} -- Incorrect handle provided in unspecified circumstances in Mojo (01a7e1e1-d249-4dd8-9a4a-ef95b5747afb)	Nessus	FreeBSD Local Security Checks	high
233369	Microsoft Edge (Chromium) < 134.0.3124.93 (CVE-2025-2783)	Nessus	Windows	high
233331	Google Chrome < 134.0.6998.177 Vulnerability	Nessus	Windows	high

Detections

Analytics

CVE-2025-2783

high

Tenable Plugins

high

high

high

high