Описание
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
A flaw was found in chromium-browser. A remote attacker could exploit a use-after-free vulnerability in the Blink component by enticing a user to visit a specially crafted HTML page. This could lead to arbitrary code execution within the sandbox environment, potentially compromising the affected system.
Отчет
This Important flaw in chromium-browser's Blink rendering engine allows a remote attacker to achieve arbitrary code execution within the browser's sandbox. This vulnerability requires user interaction, typically by visiting a specially crafted HTML page, making it a significant risk for users who process untrusted web content. The ability to execute arbitrary code, even within a sandbox, elevates the severity due to potential for further system compromise.
Дополнительная информация
Статус:
EPSS
8.8 High
CVSS3
Связанные уязвимости
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allow ...
Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
EPSS
8.8 High
CVSS3