Lookup for vulnerable packages by Package URL.
| Purl | pkg:nuget/CefSharp.Wpf.NETCore@131.2.70 |
| Type | nuget |
| Namespace | |
| Name | CefSharp.Wpf.NETCore |
| Version | 131.2.70 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | true |
| Next_non_vulnerable_version | 134.3.90 |
| Latest_non_vulnerable_version | 134.3.90 |
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-u9e3-f1kh-nkgn |
| vulnerability_id |
VCID-u9e3-f1kh-nkgn |
| summary |
CefSharp affected by incorrect handle provided in unspecified circumstances in Mojo on Windows
Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 134.0.6998.177 allowed a remote attacker to perform a sandbox escape via a malicious file. (Chromium security severity: High)
https://nvd.nist.gov/vuln/detail/CVE-2025-2783
https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop_25.html
https://issues.chromium.org/issues/405143032 |
| references |
|
| fixed_packages |
|
| aliases |
GHSA-f87w-3j5w-v58p
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-u9e3-f1kh-nkgn |
|
|
| Fixing_vulnerabilities |
|
| Risk_score | 4.0 |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:nuget/CefSharp.Wpf.NETCore@131.2.70 |