CVE-2023-4860

CVE-2023-4860 is a critical vulnerability affecting Google Chrome versions prior to 115.0.5790.98, stemming from an inappropriate implementation in Skia. This flaw allows a remote attacker to potentially escape the browser's sandbox via a crafted HTML page, assuming the renderer process has already been compromised. With a CVSS score of 9.6 (CRITICAL), it presents a high-impact threat with low attack complexity, enabling significant confidentiality, integrity, and availability compromise. While there is no evidence of active exploitation, no public exploit code (Metasploit, Nuclei, ExploitDB), and it is not listed in CISA's KEV catalog, the vulnerability has garnered substantial community discussion, indicating awareness among security researchers.