CVE-2022-3075

A flaw in Google Chrome's Mojo system allowed attackers who compromised the browser's renderer to escape the security sandbox and access the full system. This is dangerous because the sandbox normally blocks malicious code from doing serious damage.

Insufficient input validation in Mojo before Chrome 105.0.5195.102 enabled sandbox escape when an attacker with renderer process compromise could craft a malicious HTML page to trigger the vulnerability. Attack requires prior renderer compromise; impact is critical as it breaks the isolation boundary protecting the system from browser-based exploits.