Executive brief
Google Chrome's PDF reader contains a use-after-free memory vulnerability that allows remote attackers to execute arbitrary code within the browser's sandbox by delivering a malicious HTML page. An attacker exploiting this flaw could bypass Chrome's sandbox protections to achieve code execution, potentially leading to local system compromise or data theft from the user's browser.
Technical details
This vulnerability is a use-after-free condition in Chrome's PDF handling component. The vulnerability is triggered when a user visits a crafted HTML page that interacts with the PDF renderer in a specific way, causing the browser to reference memory that has already been freed. The attack requires user interaction (visiting a malicious webpage) but does not require authentication or elevated privileges. Successful exploitation results in arbitrary code execution within Chrome's sandbox; depending on sandbox escape conditions, this could potentially lead to further system compromise. The vulnerability is patched in Chrome 153.0.8010.47 and later versions.
Affected products
- Google Chrome prior to 153.0.8010.47
Timeline
- 2026-09-15: disclosed
- 2026-09-15: patched: Patch released in Chrome 153.0.8010.47