Executive brief
A vulnerability in Google Chrome's IndexedDB component, which handles browser-based database storage, could allow a malicious website to execute unauthorized code. By tricking a user into visiting a specially crafted webpage, an attacker could potentially compromise the browser's security sandbox. While the impact is limited by the browser's internal security boundaries, it represents a significant risk to user data and session security.
Technical details
A use-after-free (UAF) vulnerability exists in the IndexedDB implementation of Google Chrome. The flaw is triggered when the browser incorrectly manages memory for database objects, allowing a remote attacker to exploit the memory corruption via a specially crafted HTML page. Successful exploitation allows for arbitrary code execution (ACE) within the context of the Chrome renderer sandbox. The vulnerability was addressed in version 150.0.7871.115 for Windows and Mac, and 150.0.7871.114 for Linux. User interaction is required to the extent that a victim must navigate to a malicious URL.
Affected products
- Google Chrome prior to 150.0.7871.115
Timeline
- 2026-04-17: disclosed: Reported by zh1x1an1221 of Ant Group Tianqiong Security Lab
- 2026-07-08: patched: Fixed in Chrome Stable channel update 150.0.7871.115
- 2026-07-08: advisory