Google Chrome
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*, +1 more
- < 149.0.7827.103
A use-after-free vulnerability has been identified in the Service Worker component of Google Chrome. This issue affects versions prior to 149.0.7827.103. The vulnerability allows an attacker, who convinces a user to install a malicious extension, to potentially escape the sandbox by exploiting the crafted Chrome Extension.
Exploitation of this vulnerability could lead to a sandbox escape, allowing an attacker to execute malicious actions outside the intended restrictions.
Users can update to Google Chrome version 149.0.7827.103 or later to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.