Type confusion in the Sync feature of Google Chrome, present in versions before 156.0.8078.47, permits a remote attacker to read memory outside the sandbox by supplying a crafted file. Although the Chromium security severity is noted as Low, the flaw can expose sensitive data that may be leveraged for further attacks. The vulnerability is a classic type confusion (CWE-843).

Google Chrome versions earlier than 156.0.8078.47 are affected. The issue exists in all channel builds (stable, beta, dev) that include the vulnerable Sync implementation. Users of Chrome on Windows, macOS, Linux, and Chrome OS should be aware.

The CVSS score of 8.8 reflects a high-impact vulnerability, with an EPSS score of less than 1% indicating a low probability of exploitation under current conditions, and no entries in the CISA KEV catalog. Based on the description, it is inferred that the attack vector is remote; an attacker can deliver a crafted file through the Sync system or embed malicious content in an HTML page that triggers the type confusion, prompting Chrome to read beyond its sandbox. Successful exploitation grants the attacker read access to memory that may contain sensitive data, potentially enabling a foothold for more advanced attacks. Because exploitation requires the user to open or process the malicious content, user awareness and timely patching remain critical.