A critical sandbox escape vulnerability in Google Chrome on Mac allows remote attackers to bypass security boundaries through a malicious HTML page, posing a severe risk to system integrity.

The vulnerability exists due to an inappropriate implementation within the ANGLE graphics engine. An unauthenticated remote attacker can trigger this flaw by enticing a user to visit a specifically crafted HTML page, leading to a sandbox escape.

The ability to escape the browser sandbox grants an attacker elevated control over the underlying operating system. Given the CVSS score of 9.6, this vulnerability represents a critical threat that could lead to full system compromise, data theft, and the deployment of persistent malware. Organizations relying on Chrome for daily operations face significant risk of lateral movement if an endpoint is successfully targeted.

Immediate Action: Update Google Chrome on all Mac endpoints to version 151.0.7922.72 or later immediately to incorporate the necessary security patches.

Proactive Monitoring: Monitor endpoint security logs for unusual process execution patterns or unauthorized attempts to access system files originating from the browser process.

Compensating Controls: While no direct virtual patch exists for browser engine flaws, ensure that endpoint protection platforms are configured to block suspicious child process spawning from browser applications.

Public Exploit Available: No (exploit_available: false)

Due to the critical severity of this sandbox escape, administrators must prioritize the deployment of the latest Chrome update across all managed Mac assets. Organizations should enforce automated browser updates to ensure protection against this and future browser-based threats, as the risk of exploitation remains high for unpatched systems.