Executive brief
A vulnerability in Google Chrome for macOS could allow a malicious website to break out of the browser's security sandbox. This occurs when the browser incorrectly handles memory in its user interface components. If an attacker has already compromised the part of the browser that displays web pages, they could use this flaw to gain broader access to the underlying operating system, potentially leading to full system compromise or data theft.
Technical details
A use-after-free (UAF) vulnerability exists in the 'Views' component of Google Chrome for macOS. The flaw is triggered when the browser attempts to access memory that has already been deallocated within the UI framework. An attacker who has already achieved code execution within a compromised renderer process can exploit this condition via a specially crafted HTML page. Successful exploitation allows the attacker to bypass the Chromium sandbox and execute arbitrary code with the privileges of the browser process. The issue is addressed in Chrome version 148.0.7778.216 for Mac.
Affected products
- Google Chrome prior to 148.0.7778.216
Timeline
- 2026-05-27: patched: Stable channel update released for desktop
- 2026-05-28: disclosed: NVD publication date