Chromium Security Update (MINDBREEZE34722)
ID: MINDBREEZE34722
Affected Components: Mindbreeze InSpire, Mindbreeze InSpire SaaS
Severity: Medium
Status: Final
First published: June 6, 2025
CVEs: CVE-2025-2783, CVE-2025-3066, CVE-2025-3067, CVE-2025-3068, CVE-2025-3069, CVE-2025-3070, CVE-2025-3071, CVE-2025-3072, CVE-2025-3073, CVE-2025-3074, CVE-2025-3066, CVE-2025-3619, CVE-2025-3620
Summary
- chromium - Component: Incorrect handle provided in unspecified circumstances in Mojo on Windows.
- chromium - Component: Use after free in Navigations.
- chromium - Component: Inappropriate implementation in Intents.
- chromium - Component: Inappropriate implementation in Extensions.
- chromium - Component: Insufficient validation of untrusted input in Extensions.
- chromium - Component: Inappropriate implementation in Navigations.
- chromium - Component: Inappropriate implementation in Custom Tabs.
- chromium - Component: Inappropriate implementation in Autofill.
- chromium - Component: Inappropriate implementation in Downloads.
- chromium - Component: Use after free in Site Isolation.
- chromium - Component: Heap buffer overflow in Codecs.
- chromium - Component: Use after free in USB.
Hotfix Information
Fixed with following versions of Mindbreeze InSpire On-Premises or Mindbreeze InSpire SaaS:
- Mindbreeze InSpire 25.3 Release
- Mindbreeze InSpire Saas 25.3 Release