Google Chrome Mojo Sandbox Escape Vulnerability on Windows

A sandbox escape vulnerability has been identified in Google Chrome's Mojo component on Windows, affecting versions prior to 134.0.6998.177. The issue arises from an incorrect handle being provided in unspecified circumstances, which allowed remote attackers to escape the sandbox by using a malicious file.

Impact

Exploitation of this vulnerability allows for a sandbox escape, enabling potentially malicious files to bypass Chrome's security restrictions and interact with the underlying operating system or user environment.

Remediation

Users can update to Google Chrome version 134.0.6998.177 or later to address this vulnerability. The update will be rolled out over the coming days and weeks.