Google Chrome Race Condition Vulnerability in MHTML Allowing Cross-Origin Data Leakage

A race condition vulnerability has been identified in the MHTML component of Google Chrome, affecting versions prior to 147.0.7727.138. This vulnerability allows an attacker to leak cross-origin data by convincing a user to install a malicious extension. The issue arises from insufficient synchronization in handling MHTML data, which can be exploited by crafted Chrome Extensions.

Impact

Exploitation of this vulnerability could lead to unauthorized access and leakage of cross-origin data, potentially allowing attackers to intercept or manipulate information between different origins.

Remediation

Users can update to Google Chrome version 147.0.7727.138 or later to address this vulnerability.