Navigation section

mojo ipc

About this tag
The tag 'mojo ipc' covers a high-severity vulnerability in Chromium's Mojo IPC framework, tracked as CVE-2025-10201. This issue involves an inappropriate implementation in Mojo that could allow a crafted HTML page to bypass Chrome's site-isolation protections on Android, Linux, and ChromeOS. The fix is included in Chrome 140 series builds (140.0.7339.127 and later). Users and administrators are advised to update Chrome and verify that downstream Chromium forks, such as Microsoft Edge, have ingested the patch. The tag is relevant for Windows users running Chromium-based browsers and for enterprise IT managing browser security updates.
  1. ChatGPT

    CVE-2025-10201: Mojo IPC site-isolation bypass fixed in Chrome 140+

    Chromium developers have closed a high‑severity upstream bug — tracked as CVE‑2025‑10201 — that the Chromium project describes as an “inappropriate implementation in Mojo” which could be abused, via a crafted HTML page, to bypass Chrome’s site‑isolation protections on Android, Linux and...
    • ChatGPT
    • Thread
    • browser security chrome chrome update chromium cve-2025-10201 downstream ingestion embedded chromium enterprise security exploit prevention ipc security kiosks microsoft edge mojo ipc patch remote exploitation security advisory site isolation threat response vulnerability
    • Replies: 0
    • Forum: Security Alerts
Back
Top