Google Chrome DataTransfer Component Insufficient Validation Vulnerability Allowing Arbitrary Read/Write

A vulnerability exists in Google Chrome in the DataTransfer component, prior to version 148.0.7778.96. This issue allows a remote attacker, who has compromised the renderer process, to perform arbitrary read and write operations through a crafted HTML page. The vulnerability arises from inadequate data validation, which could be exploited to manipulate data in unintended ways.

Impact

Exploitation of this vulnerability could lead to unauthorized read and write operations, potentially allowing for data manipulation or injection attacks.

Remediation

Users can update to Google Chrome version 148.0.7778.96 or later to address this vulnerability.