A critical use after free flaw in Google Chrome's Views component enables remote attackers to escape the sandbox, resulting in a high risk of total system compromise.

This is a use after free vulnerability (CWE-416) in the Views component. An unauthenticated attacker can exploit this via a crafted HTML page, provided they have first successfully compromised the renderer process.

With a CVSS score of 9.6, this vulnerability represents a significant threat to organizational security. By escaping the sandbox, an attacker can transition from a limited browser process to executing arbitrary code with the privileges of the user, leading to potential data exfiltration and persistent system access.

Immediate Action: Update Google Chrome to version 151.0.7922.72 or higher to resolve the vulnerability.

Proactive Monitoring: Monitor for unexpected browser behavior or unusual spikes in memory usage, which may be indicative of exploitation attempts.

Compensating Controls: Implement strict endpoint security policies that limit the ability of browser processes to interact with sensitive system APIs.

Public Exploit Available: No (exploit_available: false)

The severity of this issue necessitates an immediate patching cycle across all enterprise workstations. Organizations should ensure that automatic updates for Chrome are enabled and verified.