Technical impact
The vulnerability is a use‑after‑free bug in the MimeHandlerView component of Google Chrome, which allows a remote attacker to trigger arbitrary code execution in the browser’s sandbox environment through a specially crafted HTML page. It is inferred that the flaw exploits a dangling pointer after the MimeHandlerView object has been freed, enabling the attacker to perform operations that would otherwise be confined to the sandbox. An attacker could gain complete control over the sandboxed process, potentially leaking sensitive data, modifying the browsing session, or foisting further attacks on the user’s system.
Affected Systems
Chrome browsers released before the 149.0.7827.53 patch are affected. The issue applies to the stable channel of Google Chrome for desktop platforms. Production installations that have not yet received the 149.0.7827.53 update remain vulnerable.
Risk and Exploitability
The vulnerability has a CVSS score of 8.8, indicating a high severity rating. It is rated as a remote code execution vector and has an EPSS score of < 1%, indicating an extremely low but non‑zero likelihood of exploitation; it is not listed in the CISA KEV catalog. It is inferred that the attack can be carried out by hosting a malicious HTML file or tricking a user into visiting a compromised website, with the exploit unfolding entirely within the browser sandbox. It is inferred that while the sandbox limits damage to the browser process, an attacker who successfully gains execution could pivot or exfiltrate data from the affected machine.
Debian DSA