Index / Exploitation for Priv-Esc / Google
Bypass Record

Exploitation for Priv-Esc × Google Chrome

A publicly-reported instance of Exploitation for Priv-Esc bypassing Google Chrome, recorded with its original source. Factual record; no assessment of any specific deployment.

Product
Google Chrome
Technique
Exploitation for Priv-Esc
MITRE ATT&CK
T1068
Confidence
High
Severity
Critical
Status
in the wild
Disclosed
2026-09-15
Config / version noted
Not stated

Provenance

Reported as

exploited a Chrome zero-day (CVE-2025-2783) to achieve remote code execution

Mechanism

The attack begins with a malicious website exploiting a Chrome zero-day (CVE-2025-2783) to achieve remote code execution in the browser. The exploit then leverages a Windows zero-day (CVE-2025-2784) to escalate privileges to SYSTEM. The GRIMWEDGE backdoor is deployed as the final payload, allowing credential theft and further compromise.

Detection & mitigation

Monitor for suspicious browser processes spawning unusual child processes or making unexpected network connections. Deploy EDR with exploit protection and keep systems patched; use application control to block unknown executables.

Exploitation for Priv-Esc has also been recorded against

AppleAtlassianAvastBitdefenderBroadcom (Symantec)Comodo SecurityConnectWiseCrowdStrikeElasticESETF5Fortinet

This is a record of a publicly-reported event, not an assessment of any specific organization's deployment. Detection and mitigation notes are drawn from the cited source. Where the source is silent, fields are omitted.