Researchers Discover CVE-2025-59199: One‑Click Windows Sandbox Escape via URI Handlers
SafeBreach Labs uncovered CVE-2025-59199, a vulnerability in Windows 11 that lets a low‑integrity process escape its sandbox and achieve arbitrary code execution by abusing Windows URI handling, COM infrastructure, and the browser devtools protocol. The chain requires only a single user click and was patched in October 2025, earning a CVSS 7.8 rating.