## Summary
Google Chrome on macOS is affected by a use-after-free in the TabStrip component. In versions prior to 151.0.7922.137, a remote attacker who has compromised the renderer process could potentially trigger a sandbox escape using a crafted HTML page (Chromium severity: High).
## Technical Details
- Vulnerability type: Use after free (CWE-416).
- Component: TabStrip in Google Chrome.
- Trigger: a crafted HTML page that exercises the TabStrip lifetime/ownership behavior.
- Exploit precondition: attacker must have compromised the renderer process.
- Impact mechanism: potential sandbox escape (cross-boundary impact from renderer to a more privileged context).
## Affected
- google chrome on macOS: < 151.0.7922.137.
## Impact
- Potential sandbox escape following renderer compromise.
- Consequences indicated by the CVSS vector include confidentiality, integrity, and availability impact (C:H/I:H/A:H) with network reachability (AV:N) and user interaction (UI:R).
## Mitigation
1. Upgrade Google Chrome on macOS to 151.0.7922.137 or later.
2. If immediate upgrade is not possible, reduce exposure by limiting access to untrusted web content (since exploitation is via a crafted HTML page) and monitor for signs of renderer compromise.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CWE-416