Insufficient validation of untrusted input in Metrics

Summary

Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) An insufficient validation of untrusted input flaw was found in the Metrics component of the Chromium browser. Upstream bug(s): https://code.google.com/p/chromium/issues/detail?id=520189702 Red Hat Product Security rates the severity of this flaw as determined by the Google Chrome Security Advisory. Red Hat severity: Important — CVSS 8.3 (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). Weakness: CWE-911. No fixing RHSA erratum has published yet; monitor the Red Hat CVE page and patch when it ships.