A critical use after free vulnerability in Google Chrome allows remote attackers to bypass sandbox protections, posing a severe risk of arbitrary code execution.

This is a use after free vulnerability (CWE-416) located in the Ozone component. It can be triggered by an unauthenticated remote attacker through a specially crafted HTML page, requiring user interaction to execute.

The vulnerability carries a CVSS score of 9.6, reflecting its capacity for a full sandbox escape. Successful exploitation allows an attacker to break out of the browser's security boundary, potentially leading to unauthorized system access, data theft, or complete compromise of the underlying host machine.

Immediate Action: Update Google Chrome to version 151.0.7922.72 or later immediately to apply the vendor-provided security patch.

Proactive Monitoring: Review browser crash logs and system security events for unusual process activity that may indicate attempts to exploit memory corruption flaws.

Compensating Controls: Ensure that browser-level security policies are enforced and utilize endpoint detection and response (EDR) tools to monitor for unauthorized child processes spawned by the browser.

Public Exploit Available: No (exploit_available: false)

Given the critical severity and the potential for sandbox escape, organizations must prioritize patching all Chrome installations. Deployment of the latest stable channel update is the only effective way to remediate this memory corruption risk.