Google Chrome for Android Script Injection Vulnerability in SanitizerAPI Allowing UXSS

A vulnerability allowing script injection has been identified in the SanitizerAPI of Google Chrome on Android, affecting versions prior to 148.0.7778.168. This vulnerability allows remote attackers to inject arbitrary scripts or HTML, leading to a cross-site scripting issue that could be exploited under certain conditions.

Impact

Exploitation of this vulnerability allows for cross-site scripting (XSS) attacks, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users can update to Google Chrome version 148.0.7778.168 or later to address this vulnerability.