CVSS 8.8 (HIGH) · Actively exploited (listed in CISA KEV)
A use-after-free vulnerability in Google Chrome's XML handling allows remote attackers to execute arbitrary code within the sandbox. This issue affects versions prior to 157.0.8103.50 and is classified as high severity by Chromium.
Successful exploitation enables arbitrary code execution inside the browser sandbox, potentially leading to full system compromise if combined with other vulnerabilities.
Update Google Chrome to version 157.0.8103.50 or later immediately to mitigate this risk.
Google Chrome 的 XML 處理中存在釋放後重用漏洞，允許遠端攻擊者在沙箱內執行任意程式碼。此問題影響 157.0.8103.50 之前的版本，被 Chromium 評為高嚴重性。
請立即將 Google Chrome 更新至 157.0.8103.50 或更高版本以消除此風險。