Google Chrome Compositing Use-After-Free Vulnerability Allowing Sandbox Escape

A use-after-free vulnerability has been identified in the compositing process of Google Chrome, affecting versions prior to 146.0.7680.178. This vulnerability allows a remote attacker who has compromised the renderer process to potentially escape the sandbox by using a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to a sandbox escape, allowing a compromised renderer process to perform actions outside of its intended restrictions.

Remediation

Users can update to Google Chrome version 146.0.7680.178 or later to address this vulnerability.