Hyeonjun Ahn

A race condition in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. A race condition occurs when the timing or order of events affects the correctness of the software.

Improper input validation in the V8 engine allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page.

A race condition leads to a use-after-free issue within the Audio/Video component. A race condition occurs when the timing or order of events affects the correctness of the software, while use-after-free happens when a program continues to use a pointer after it has been freed, potentially leading to crashes or arbitrary code execution.

A use-after-free issue exists within the DOM: Core & HTML component. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

A use-after-free issue exists in the Audio/Video component. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A use-after-free issue exists in the Layout: Text and Fonts component. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

JIT miscompilation occurs in the DOM: Core & HTML component. JIT (Just-In-Time) compilation is a method used by software to improve execution speed by compiling code during runtime.

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.178 Description An object corruption issue in the V8 component of Google Chrome, prior to version 146.0.7680.178, could allow a remote attacker to execute arbitrary code within a sandbox environment through a specially crafted HTML page. The Chromium security severity is rated as High. Recommendations Update Google Chrome to version 146.0.7680.178 or later.