Google Chrome PrivateAI Use-After-Free Vulnerability Allowing Sandbox Escape

A use-after-free vulnerability has been identified in the PrivateAI component of Google Chrome, affecting versions prior to 147.0.7727.55. This vulnerability could allow a remote attacker to perform a sandbox escape by convincing a user to engage in specific UI gestures while interacting with a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to a sandbox escape, allowing potentially malicious actions to be performed outside of the intended security confines.

Remediation

Users can update to Google Chrome version 147.0.7727.55 or later to address this vulnerability.