A high severity use after free vulnerability in Google Chrome WebMCP component presents a risk of arbitrary code execution to end users.

This is a use after free vulnerability located in the WebMCP component. The vulnerability is unauthenticated and triggered via user interaction with a malicious web resource.

The severity of this issue is underscored by its CVSS score of 8.8, indicating a high potential for impact on confidentiality, integrity, and availability. Exploitation could allow an attacker to gain control over the user session, leading to unauthorized access to sensitive data or further compromise of the local system.

Immediate Action: Update all installations of Google Chrome to the latest version provided by the vendor.

Proactive Monitoring: Review browser crash reports and system logs for patterns that might suggest memory corruption or exploitation attempts.

Compensating Controls: Deploy endpoint security solutions that provide browser protection and utilize modern operating system security features to mitigate memory-based attacks.

Public Exploit Available: false

Given the high CVSS score and the prevalence of browser-based attacks, prompt patching is essential. Organizations should ensure that automatic updates are enabled or push the latest version to all managed endpoints to minimize the exposure window.