A critical integer overflow vulnerability in Google Chrome allows remote attackers to escape the browser sandbox, posing a severe risk to system integrity and user data.

The flaw resides in the ANGLE graphics component, where an integer overflow can be triggered by a remote, unauthenticated attacker. By leveraging a compromised renderer process through a malicious webpage, an attacker can bypass browser sandbox protections.

The vulnerability carries a CVSS score of 9.6, reflecting the high potential for full system compromise. Successful exploitation allows an attacker to break out of the browser sandbox, which is the primary layer of defense against malicious code. This could lead to unauthorized access to the underlying operating system, data exfiltration, or the installation of persistent malware, resulting in significant operational and security risks.

Immediate Action: Update all Google Chrome installations to version 151.0.7922.72 or later immediately to incorporate the necessary security patches.

Proactive Monitoring: Monitor endpoint security logs for unusual process behavior or unexpected crashes within the Chrome renderer process, which may indicate attempted exploitation.

Compensating Controls: Ensure that the browser is running with the latest security baseline configurations and utilize endpoint detection and response (EDR) solutions to identify and block unauthorized system calls originating from the browser process.

Public Exploit Available: No — there is no confirmed public exploit available.

Given the critical nature of this sandbox escape vulnerability, organizations must prioritize the deployment of the Chrome update across all managed environments. Sandbox escapes are high-value targets for attackers, and timely patching remains the most effective method for maintaining browser security and preventing lateral movement into the host operating system.