Google Chrome WebXR Insufficient Policy Enforcement Information Disclosure Vulnerability

A vulnerability exists in Google Chrome on Android, in WebXR, prior to version 148.0.7778.168. This issue allows a remote attacker, who has compromised the renderer process, to access potentially sensitive information from process memory. The exploitation is achieved through a crafted HTML page, taking advantage of insufficient policy enforcement.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information from process memory, potentially allowing for further exploitation or data leakage.

Remediation

Users can update to Google Chrome version 148.0.7778.168 or later to address this vulnerability.