Google Chrome FocusedFrameChanged and NotifyFocusChangedObservers Use After Free

This strike exploits a vulnerability in Google Chrome. Specifically, javascript can be crafted in such a way that the FocusedFrameChanged and NotifyFocusChangedObservers functions may invoke a user defined listener, which can cause an element to be added to sessions_ during iteration. This will invalidate the iterator, and can allow for a use after free condition to occur upon the next iteration. When this happens a denial of service condition, or potentially remote code execution, may occur.