Executive brief
Google Chrome, a widely used web browser, contained a critical vulnerability in its Web Apps component. An attacker who has already gained control over a browser's rendering process could use this flaw to escape the browser's security sandbox. This could allow the attacker to gain unauthorized access to the underlying operating system, potentially leading to the theft of sensitive data or the installation of malicious software.
Technical details
A use-after-free (UAF) vulnerability exists in the Web Apps component of Google Chrome prior to version 149.0.7827.103. The flaw is triggered when the browser incorrectly manages memory during the lifecycle of Web App objects. A remote attacker who has already achieved code execution within the sandboxed renderer process can exploit this memory corruption to escape the sandbox and execute arbitrary code on the host operating system. This is achieved by enticing a user to visit a specially crafted HTML page. Google has addressed this vulnerability in the stable channel update 149.0.7827.103 for Windows and Mac, and 149.0.7827.102 for Linux.
Affected products
- Google Chrome prior to 149.0.7827.103
Timeline
- 2026-05-29: other: Reported to Google by internal researchers
- 2026-06-08: patched: Fixed in Chrome Stable Channel Update 149.0.7827.103
- 2026-06-09: disclosed: Public advisory published