A critical out of bounds memory access vulnerability in Google Chrome is currently being exploited in the wild, posing a significant risk of remote code execution.

This flaw exists within the ANGLE graphics engine component. It allows an unauthenticated remote attacker to perform out of bounds memory access by enticing a user to navigate to a specifically crafted HTML page.

The vulnerability carries a CVSS score of 9.5, reflecting its critical severity and the potential for total system impact. Successful exploitation can lead to arbitrary code execution, resulting in full compromise of the user workstation, potential data exfiltration, and significant reputational or operational damage to the organization.

Immediate Action: Update Google Chrome to version 143.0.7499.110 or later immediately across all macOS endpoints.

Proactive Monitoring: Review endpoint security logs for unusual browser activity or crash reports related to the ANGLE graphics component.

Compensating Controls: While no direct substitute exists for patching, ensure that browser-based security policies are enforced and consider using endpoint detection and response (EDR) tools to monitor for suspicious child processes spawned by the browser.

Public Exploit Available: Yes, multiple public proofs-of-concept are available via GitHub repositories.

Due to the confirmed active exploitation and the critical nature of the memory access flaw, organizations must prioritize the deployment of the vendor-provided security update. Patch management teams should treat this as a top-priority item to prevent potential system compromise and data loss.