Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potenti...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Use after free in site isolation in Google Chrome prior to 86.0.4240.198 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 chromium

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"87.0.4280.88-0.1"}]}]

Debian:13 chromium

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"87.0.4280.88-0.1"}]}]

Debian:14 chromium

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"87.0.4280.88-0.1"}]}]

参照URL

advisory security-tracker.debian.org