Threats tagged 'ghsa-f4jw-q97f-mrjc'

A vulnerability in Google Chrome prior to version 154.0.8037.57 involves an uninitialized GPU resource that allows a remote attacker who has compromised the renderer process to read memory outside the sandbox via a crafted HTML page. The issue is classified with a high security severity by Chromium but has a CVSS score of 3.4, indicating low overall severity due to attack complexity and required user interaction.