Google Chrome Use-After-Free Vulnerability in WindowDialog Allowing Sandbox Escape

A use-after-free vulnerability has been identified in the WindowDialog component of Google Chrome, affecting versions prior to 146.0.7680.71. This vulnerability allows a remote attacker who has compromised the renderer process to potentially escape the sandbox by exploiting a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to a sandbox escape, allowing a compromised renderer process to perform actions outside of its intended restrictions.

Remediation

Users can update to Google Chrome version 146.0.7680.71 or later to address this vulnerability.