CVE-2023-4860

To exploit the vulnerability, an attacker must first compromise the browser's renderer process (e.g., through a separate vulnerability). Then, using an appropriately crafted HTML page, they can exploit the improper implementation in the Skia graphics library to escape from the sandbox mechanism. This action goes beyond the isolated browser environment and can lead to interactions with the user's operating system.

An attacker who has previously compromised the renderer process can escape the browser sandbox and gain access to operating system resources – potentially leading to data disclosure, modification, or system destabilization.

Google Chrome should be updated to version 115.0.5790.98 or newer. The update is available through the browser's built-in update mechanism or on the manufacturer's website according to the references.

Google Chrome in versions earlier than 115.0.5790.98