Qab

The issue is related to a use after free in Vulkan, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information.

The issue allows remote attackers to obtain sensitive information via a crafted web site. This is related to the lack of protection for service data, which can be exploited by a remote attacker to gain confidential information using a specially formed website.

The issue is related to errors in handling the "#" character in URI data, which can be exploited by a remote attacker to spoof websites. The estimated number of potentially affected devices and details about real-world incidents are not specified. Technical details about exploitation include mishandling of the `#` character in a `data: URI`, allowing remote attackers to spoof web sites via unspecified vectors.