A critical vulnerability in Google Chrome allows remote attackers to bypass sandbox protections through insufficient input validation, posing a high risk of system compromise.

This vulnerability involves insufficient validation of untrusted input within the ANGLE graphics engine. An unauthenticated remote attacker can exploit this via a specially crafted HTML page to escape the browser sandbox.

Successful exploitation allows an attacker to execute arbitrary code outside the browser sandbox, potentially leading to full system compromise, data theft, or malware installation. With a CVSS score of 9.6, this flaw represents a critical risk to organizational endpoints, as the attack vector is network-based and requires minimal user interaction.

Immediate Action: Update all instances of Google Chrome to version 151.0.7922.72 or later immediately to apply the vendor-supplied patches.

Proactive Monitoring: Review endpoint security logs for unusual browser activity or unexpected process execution patterns originating from Google Chrome.

Compensating Controls: Ensure users are operating with the principle of least privilege to limit the potential impact of a successful sandbox escape.

Public Exploit Available: Unknown

Given the critical CVSS severity and the potential for complete sandbox bypass, organizations must prioritize updating all Google Chrome installations. Immediate deployment of the provided update is essential to mitigate the risk of remote code execution and maintain the integrity of endpoint security.