A race condition in the Google Chrome Safe Browsing component on macOS presents a high-severity risk of unauthorized system interaction.

This is a race condition vulnerability within the Safe Browsing module. The vulnerability requires a local attacker to potentially leverage timing discrepancies to gain unauthorized access or manipulate browser security states.

Successful exploitation of this race condition could lead to a compromise of browser security controls, potentially exposing the user to malicious content that the Safe Browsing feature is designed to block. Given the CVSS score of 8.3, this flaw poses a significant risk to organizational data integrity and endpoint security if leveraged to deliver further payloads.

Immediate Action: Update Google Chrome to version 149 or later immediately to incorporate the necessary race condition fixes.

Proactive Monitoring: Monitor endpoint security logs for unusual browser process behavior or unauthorized attempts to modify browser configurations.

Compensating Controls: Ensure that endpoint protection software is active and configured to detect and block suspicious code execution originating from web browser processes.

Public Exploit Available: false

The vulnerability represents a significant risk to the security posture of macOS workstations. Administrators should prioritize the deployment of the latest Google Chrome updates to all managed devices to mitigate the risk of exploitation.