Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Use after free in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 chromium

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0.8010.52-1~deb12u1"}]}]

Debian:13 chromium

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0.8010.47-2~deb13u1"}]}]

Debian:14 chromium

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"153.0.8010.47-1"}]}]

参照URL

advisory security-tracker.debian.org