Описание
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
A flaw was found in Google Chrome. A remote attacker, who has already compromised the browser's renderer process, could exploit a use-after-free vulnerability in the Aura component by tricking a user into visiting a specially crafted HTML page. This could potentially allow the attacker to perform a sandbox escape, bypassing security mechanisms and gaining further access to the system.
Отчет
This Important use-after-free vulnerability in the Aura component of Chromium allows a remote attacker to perform a sandbox escape. Exploitation requires a prior compromise of the browser's renderer process, which could then be leveraged via a crafted HTML page to bypass security boundaries. This poses a significant risk for Red Hat platforms such as Fedora and EPEL, as it could lead to further system compromise beyond the browser's sandbox.
Дополнительная информация
Статус:
EPSS
8.2 High
CVSS3
Связанные уязвимости
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.1 ...
Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
EPSS
8.2 High
CVSS3