[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"focus:bluemoon-exploit-kit-chains-recent-chrome-windows-zero-days-mu0lpn6v":3},{"item":4},{"id":5,"title":6,"slug":7,"summary":8,"severity":9,"category":10,"cve_ids":11,"affected_products":12,"action_required":14,"article_ids":15,"ioc_summary":17,"source_urls":18,"status":20,"expires_at":21,"created_at":22,"updated_at":23,"articles":24},"c6ffa5d2-398a-4291-b296-61387d19b3d2","BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days","bluemoon-exploit-kit-chains-recent-chrome-windows-zero-days-mu0lpn6v","BlueMoon exploit kit chains unpatched Chrome and Windows zero-days for sandbox escape and privilege escalation, actively deployed by state-sponsored actors including China-linked groups. This is spreading rapidly across threat actor communities with low barriers to adoption, increasing risk of both espionage and financially motivated attacks. Any user visiting a compromised site via vulnerable Chrome versions faces immediate system compromise.","critical","advisory",[],[13],"Chrome","Immediately patch Chrome to the latest version and prioritize Windows updates. Hunt for suspicious Chrome child processes, unexpected privilege escalation attempts, and anomalous sandbox escape indicators in endpoint telemetry. Block known BlueMoon delivery domains if IOCs surface.",[16],"0994a83f-fd18-40b2-a058-b5cb701e2838",null,[19],"https:\u002F\u002Fwww.securityweek.com\u002Fbluemoon-exploit-kit-chains-recent-chrome-windows-zero-days\u002F","active","2026-09-16T02:05:42.871+00:00","2026-09-14T02:05:48.644868+00:00","2026-09-14T02:06:49.000745+00:00",[25],{"id":16,"title":6,"url":19}]