A use after free in Blink in Google Chrome prior to 59.0.3071.104 for Mac Windows and Linux and 59.0.3071.117 for Android allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page aka an IndexedDB sandbox escape.