Technical impact
A use‑after‑free flaw in the Device Trust component of Google Chrome on macOS allows an attacker who has already compromised the renderer process to craft an HTML page that targets freed memory. The flaw can lead to a sandbox escape, providing the attacker potential control over the system beyond the renderer’s restricted privileges. This vulnerability carries the standard Medium severity rating in Chromium’s assessment but poses a serious risk due to the possibility of privilege escalation.
Affected Systems
All users of Google Chrome on macOS running versions prior to 149.0.7827.53 are affected, regardless of installation type. The vulnerability is specific to the Device Trust feature in older Chrome releases.
Risk and Exploitability
The CVSS score is 9.6, but the exploitation path requires the attacker to compromise the renderer process, which is generally achievable through malicious web content. The EPSS score is less than 1% and the vulnerability is not listed in CISA’s KEV catalog. The attack vector is inferred to be remote, via a crafted HTML page delivered over the network to a victim’s browser. Given the potential for sandbox escape, the risk remains significant until the issue is patched.
Debian DSA