Google Chrome WebView Use-After-Free Vulnerability Allowing Sandbox Escape on Android

A use-after-free vulnerability has been identified in the WebView component of Google Chrome on Android, affecting versions prior to 146.0.7680.178. This vulnerability allows a remote attacker who has compromised the renderer process to potentially escape the sandbox by exploiting a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to a sandbox escape, allowing a remote attacker to execute arbitrary code outside the intended security boundaries.

Remediation

Users can update to Google Chrome version 146.0.7680.178 or later to address this vulnerability.