Google Chrome Headless Out-of-Bounds Read Vulnerability Allowing Sandbox Escape

A vulnerability allowing an out-of-bounds read has been identified in the Headless mode of Google Chrome. This issue affects versions prior to 148.0.7778.216. The vulnerability could allow a remote attacker, who has compromised the renderer process, to perform a sandbox escape by using a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to a sandbox escape, allowing a compromised renderer process to execute code outside of its intended restrictions.

Remediation

Users can update to Google Chrome version 148.0.7778.216 or later to address this vulnerability.