Google Chrome
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*, +2 more
- < 146.0.7680.71
A use-after-free vulnerability has been identified in the Extensions component of Google Chrome, affecting versions prior to 146.0.7680.71. This vulnerability allows an attacker to exploit heap corruption by convincing a user to install a malicious extension, potentially leading to arbitrary code execution via a crafted HTML page.
Exploitation of this vulnerability could result in heap corruption, allowing for potential arbitrary code execution.
Users can update to Google Chrome version 146.0.7680.71 or later to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.