Use-after-free in Google Chrome Visuals sandbox escape

Successful exploitation can allow an attacker to cross the renderer sandbox boundary and obtain execution in a more privileged context than the compromised renderer process. This can enable broader compromise of the browser security model and may lead to high-impact confidentiality, integrity, and availability consequences depending on the follow-on payload and execution context.

Where immediate patching is not possible, reduce exposure by limiting use of untrusted web content, isolating high-risk browsing activity, and applying defense-in-depth controls that make initial renderer compromise more difficult. Because the provided content states exploitation requires a prior renderer compromise plus crafted HTML content, mitigations should focus on preventing access to attacker-controlled pages and rapidly deploying browser updates. These measures are temporary and do not replace patching.

Update Google Chrome to version 124.0.6367.201 or later. Chromium-based browsers should also be updated to vendor releases that incorporate the upstream Chromium fix for CVE-2024-4671.