4 ms·
> (it implements the sandbox itself, so no need for another one on top). "An unexpected message in the WebGPU IPC framework could lead to a use-after-free and
by pengaru 3y ago
> (it implements the sandbox itself, so no need for another one on top).
"An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape." [0]
Defense in depth applies here, you definitely want to sandbox any network application as complex as a modern web browser.
[0] https://nvd.nist.gov/vuln/detail/CVE-2022-26486 https://nvd.nist.gov/vuln/detail/CVE-2022-26486