A critical use after free vulnerability in Google Chrome allows remote attackers to perform a sandbox escape, potentially leading to full system compromise.

This flaw is a use after free vulnerability located in the GPU process. The attack is unauthenticated and requires user interaction to visit a malicious site, which can then trigger the sandbox escape.

The ability to escape the browser sandbox represents a critical security failure, as it allows arbitrary code execution outside the restricted browser environment. With a CVSS score of 9.6, this vulnerability poses a severe risk of total system compromise, data theft, and unauthorized persistence on user devices.

Immediate Action: Update Google Chrome to the latest stable release provided by Google to incorporate the necessary security patches.

Proactive Monitoring: Monitor endpoint security logs for anomalous browser activity or unexpected process terminations originating from Chrome.

Compensating Controls: Ensure that endpoint protection software is active and configured to block known malicious web domains and restrict browser-based execution privileges.

Public Exploit Available: No (exploit_available: false)

Given the critical CVSS severity of 9.6 and the potential for full sandbox escape, organizations must prioritize the deployment of the latest Chrome updates across all managed Android devices. Failure to patch allows a pathway for attackers to bypass existing browser security boundaries and gain elevated control over the underlying operating system.