Executive brief
A security vulnerability exists in Google Chrome's Viz component, which handles visual content and graphics. An attacker who has already partially compromised the browser could use this flaw to escape the security sandbox, potentially gaining full control over the underlying computer system. This would allow for the theft of sensitive data or the installation of malicious software.
Technical details
A use-after-free (UAF) vulnerability exists in the Viz (Visuals) component of Google Chrome. The flaw is triggered when the browser attempts to access memory that has already been freed, specifically within the graphics stack. To exploit this, a remote attacker must first compromise the renderer process (e.g., via a separate V8 or DOM vulnerability) and then entice a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to bypass the Chrome sandbox, leading to arbitrary code execution with the privileges of the browser process. This issue was fixed in version 147.0.7727.101.
Affected products
- Google Chrome prior to 147.0.7727.101
Timeline
- 2026-03-30: disclosed: Reported to Google internally
- 2026-04-15: patched: Fixed in Chrome version 147.0.7727.101/102
- 2026-04-15: advisory: Public advisory published by Google Chrome team