Out-of-Bounds Read in Google Chrome on Windows

Executive Summary

This is an out of bounds read vulnerability in ANGLE, a graphics library used by Google Chrome on Windows. It allows a remote attacker to potentially execute arbitrary code outside the sandbox by tricking a user into visiting a specially crafted HTML page. The vulnerability has a medium severity rating from Chromium.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability is specific to Google Chrome versions prior to 152.0.7977.65. Detection involves checking the installed Chrome version. On Windows, open Chrome and go to chrome://settings/help to see if an update is available. Alternatively, check the version via command line with 'wmic product where name="Google Chrome" get version' in Command Prompt.

Useful 0 Not Useful 0

Impact Analysis

If exploited, this vulnerability could allow an attacker to run malicious code on your computer, bypassing Chrome's security sandbox. This could lead to unauthorized access to your system, data theft, or installation of malware. Users are impacted if they use an unpatched version of Chrome on Windows.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability is an out of bounds read in ANGLE within Google Chrome, which could allow a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Such vulnerabilities may lead to unauthorized data access or exfiltration, potentially violating GDPR's data protection requirements or HIPAA's safeguards for protected health information if exploited.

Useful 0 Not Useful 0

Mitigation Strategies

Update Google Chrome to version 152.0.7977.65 or later to address the out of bounds read vulnerability in ANGLE.

Useful 0 Not Useful 0