Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
https://security.gentoo.org/glsa/202007-08
https://chromereleases.googleblog.com/2020/06/stable-channel-update-for-desktop_15.html