Out of Bounds Read in Google Chrome

Executive Summary

This vulnerability is an out of bounds read in the Skia component of Google Chrome versions prior to 149.0.7827.103. It allows a remote attacker who has already compromised the renderer process to leak cross-origin data by using a specially crafted HTML page.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to unauthorized disclosure of data from different origins, meaning sensitive information from other websites or web applications could be leaked to an attacker. This can compromise user privacy and security, especially if the attacker has control over the renderer process.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability allows a remote attacker who has compromised the renderer process to leak cross-origin data via a crafted HTML page. Such data leakage could potentially expose sensitive information.

Exposure of sensitive or personal data through this vulnerability could impact compliance with data protection regulations such as GDPR or HIPAA, which require safeguarding personal and health information against unauthorized access or disclosure.

However, the provided information does not specify exact compliance impacts or whether any specific data types protected under these regulations are affected.

Useful 0 Not Useful 0