Executive brief
A vulnerability in Google Chrome's Autofill feature could allow an attacker to bypass security protections. By convincing a user to visit a specially crafted website, an attacker who has already partially compromised the browser could escape the 'sandbox'—a security layer designed to keep malicious code from affecting the rest of the computer. This could lead to unauthorized access to the user's system or data.
Technical details
A use-after-free vulnerability exists in the Autofill component of Google Chrome. The flaw is triggered when the browser incorrectly manages memory during the processing of form data or HTML elements. A remote attacker who has already achieved code execution within the renderer process (e.g., via a separate exploit) can leverage this vulnerability to perform a sandbox escape. This is achieved by enticing a user to navigate to a malicious HTML page, allowing the attacker to execute code with higher privileges on the host operating system. The issue is resolved in version 149.0.7827.53.
Affected products
- Google Chrome prior to 149.0.7827.53
Timeline
- 2026-06-02: patched: Fixed in Chrome 149.0.7827.53 stable channel update.
- 2026-06-04: disclosed: CVE published to NVD.