Google Chrome encountered a critical zero-day vulnerability identified as CVE-2025-2783, being exploited through a campaign named Operation ForumTroll. Targeting various institutions, the flaw allowed attackers to escape Chrome’s sandbox, potentially enabling them to execute arbitrary code on victims' systems, with minimal interaction. Despite a prompt patch release in Chrome version 134.0.6998.177/.178, the situation posed espionage risks, likely attributed to an APT group's involvement. Organizations were urged to upgrade their browsers and enhance security protocols to prevent exploitation.
Source: https://cybersecuritynews.com/cisa-warns-of-google-chrome-zero-day/
TPRM report: https://scoringcyber.rankiteo.com/company/google-chrome
"id": "goo058032925",
"linkid": "google-chrome",
"type": "Vulnerability",
"date": "3/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"{'affected_entities': [{'industry': 'Software',
'location': 'Global',
'name': 'Google',
'type': 'Technology Company'}],
'attack_vector': 'Sandbox Escape',
'description': 'Google Chrome encountered a critical zero-day vulnerability '
'identified as CVE-2025-2783, being exploited through a '
'campaign named Operation ForumTroll. Targeting various '
'institutions, the flaw allowed attackers to escape Chrome’s '
'sandbox, potentially enabling them to execute arbitrary code '
"on victims' systems, with minimal interaction. Despite a "
'prompt patch release in Chrome version 134.0.6998.177/.178, '
'the situation posed espionage risks, likely attributed to an '
"APT group's involvement. Organizations were urged to upgrade "
'their browsers and enhance security protocols to prevent '
'exploitation.',
'impact': {'systems_affected': ['Google Chrome']},
'initial_access_broker': {'entry_point': 'Sandbox Escape'},
'motivation': 'Espionage',
'recommendations': ['Upgrade browsers', 'Enhance security protocols'],
'response': {'containment_measures': ['Patch release in Chrome version '
'134.0.6998.177/.178'],
'remediation_measures': ['Upgrade browsers',
'Enhance security protocols']},
'threat_actor': 'APT Group',
'title': 'Operation ForumTroll: Exploitation of CVE-2025-2783 in Google '
'Chrome',
'type': 'Zero-Day Vulnerability',
'vulnerability_exploited': 'CVE-2025-2783'}