Actively exploited sandbox RCE in all Chromium versions
Compiled by KHAO Editorial — aggregated from 1 source. See llms.txt for citation guidance.
◌ Single Source
Type confusion in V8 in Google Chrome before 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Key facts
- Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements
- Type confusion in V8 in Google Chrome before 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
- By selecting these links, you will be leaving NIST webspace
- NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites
Summary
Further, NIST does not endorse any commercial products that may be mentioned on these sites. The team have provided a link to this site because it has information that may be of interest to their users. Reference CISA's BOD 22-01 and Known Exploited Vulnerabilities Catalog for further guidance and requirements.