Threats tagged 'ghsa-cpwq-wfh7-jf75'

A use-after-free vulnerability exists in the V8 JavaScript engine used by Google Chrome versions prior to 148.0.7778.96. This flaw allows an attacker who convinces a user to install a malicious Chrome extension to execute arbitrary code within the browser's sandbox environment. The vulnerability is classified with high severity and has a CVSS score of 8.8.