Google Chrome Use-After-Free Vulnerability in Google Lens Allowing Information Disclosure

A use-after-free vulnerability has been identified in Google Lens, part of Google Chrome, prior to version 148.0.7778.168. This vulnerability allowed a remote attacker who had compromised the renderer process to access potentially sensitive information from process memory by using a crafted HTML page.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information from process memory.

Remediation

Users can update to Google Chrome version 148.0.7778.168 or later to address this vulnerability.