Google Chrome Use-After-Free Vulnerability in HID Allowing Sandbox Escape

A use-after-free vulnerability has been identified in the Human Interface Device (HID) component of Google Chrome, affecting versions prior to 148.0.7778.168. This vulnerability could allow a remote attacker to perform a sandbox escape by convincing a user to engage in specific UI gestures while interacting with a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to a sandbox escape, allowing potentially malicious actions to be performed outside of the browser's security restrictions.

Remediation

Users can update to Google Chrome version 148.0.7778.168 or later to address this vulnerability.