1. Home
  2. Mapping Frameworks
  3. Known Exploited Vulnerabilities Home
  4. Sandbox Bypass or Escape Capability Group

Known Exploited Vulnerabilities Sandbox Bypass or Escape Capability Group

All Mappings

Capability ID Capability Description Mapping Type ATT&CK ID ATT&CK Name Notes
CVE-2014-0546 Adobe Acrobat and Reader Sandbox Bypass Vulnerability primary_impact T1068 Exploitation for Privilege Escalation
Comments
This vulnerability allows bypassing sandbox protection and run native code.
References
  1. https://securelist.com/cve-2014-0546-used-in-targeted-attacks-adobe-reader-update/65577/
CVE-2014-0546 Adobe Acrobat and Reader Sandbox Bypass Vulnerability primary_impact T1497 Virtualization/Sandbox Evasion
Comments
This vulnerability allows bypassing sandbox protection and run native code.
References
  1. https://securelist.com/cve-2014-0546-used-in-targeted-attacks-adobe-reader-update/65577/
CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability secondary_impact T1497 Virtualization/Sandbox Evasion
Comments
This vulnerability allows attackers to escape Chrome’s sandbox through a Mojo IPC message crafted to trigger higher privilege. Exploitation has been reported as part of a cyber-espionage campaign.
References
  1. https://fidelissecurity.com/vulnerabilities/cve-2025-2783/ https://www.bleepingcomputer.com/news/security/google-fixes-chrome-zero-day-exploited-in-espionage-campaign/
CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability exploitation_technique T1203 Exploitation for Client Execution
Comments
This vulnerability allows attackers to escape Chrome’s sandbox through a Mojo IPC message crafted to trigger higher privilege. Exploitation has been reported as part of a cyber-espionage campaign.
References
  1. https://fidelissecurity.com/vulnerabilities/cve-2025-2783/ https://www.bleepingcomputer.com/news/security/google-fixes-chrome-zero-day-exploited-in-espionage-campaign/
CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability primary_impact T1548 Abuse Elevation Control Mechanism
Comments
This vulnerability allows attackers to escape Chrome’s sandbox through a Mojo IPC message crafted to trigger higher privilege. Exploitation has been reported as part of a cyber-espionage campaign.
References
  1. https://fidelissecurity.com/vulnerabilities/cve-2025-2783/ https://www.bleepingcomputer.com/news/security/google-fixes-chrome-zero-day-exploited-in-espionage-campaign/

Capabilities

Capability ID Capability Name Number of Mappings
CVE-2025-2783 Google Chromium Mojo Sandbox Escape Vulnerability 3
CVE-2014-0546 Adobe Acrobat and Reader Sandbox Bypass Vulnerability 2