Google Chrome Use-After-Free Vulnerability in Aura Allowing Sandbox Escape

A use-after-free vulnerability has been identified in the Aura component of Google Chrome on Windows, affecting versions prior to 148.0.7778.96. This vulnerability allows a remote attacker who has compromised the renderer process to potentially escape the sandbox by exploiting a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to a sandbox escape, allowing a remote attacker to execute arbitrary code outside the browser's sandbox environment.

Remediation

Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.