Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:28788
HistoryDec 21, 2020 - 8:39 p.m.

Sandbox Escape

2020-12-2120:39:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
sid
sandbox escape
use after free
google chrome
autofill
remote attacker
compromised
renderer process
html page

EPSS

0.007

Percentile

80.9%

chromium, sid is vulnerable to sandbox escape. It is due to a use after free in autofill in Google Chrome which allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.