Google Chrome DataTransfer Insufficient Input Validation Vulnerability Allowing Memory Information Disclosure

A vulnerability exists in Google Chrome in the DataTransfer component, prior to version 148.0.7778.168. This issue stems from inadequate validation of untrusted input, which could enable a remote attacker to extract potentially sensitive information from process memory. The exploitation requires convincing a user to perform specific UI gestures while interacting with a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information from process memory, potentially allowing for further exploitation or data leakage.

Remediation

Users can update to Google Chrome version 148.0.7778.168 or later to address this vulnerability.