REDHAT-BUG-2508971: High severity Google Chrome for Android vulnerability
Inappropriate implementation in ANGLE in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
Which devices and Chrome versions are affected?
The issue affects Google Chrome on Android versions prior to 151.0.7922.72. The provided data does not identify affected desktop Chrome builds or other operating systems.
What does an attacker need to exploit this issue?
An attacker would need to get a user to load a crafted HTML page remotely. Successful exploitation could potentially allow escape from the Chrome sandbox.
Is there an indicated workaround if updating Chrome is not immediately possible?
No workaround or mitigating configuration is provided. Until Chrome is updated to 151.0.7922.72 or later, reducing exposure to untrusted or attacker-controlled web content is the only precaution supported by the available information.