Google Chrome versions prior to 151.0.7922.72 are vulnerable to a sandbox escape, potentially allowing a remote attacker to achieve full system compromise.

This vulnerability involves improper input validation within the ANGLE graphics library, which can be triggered by an unauthenticated remote attacker who has already compromised the renderer process to escape the browser sandbox.

Successful exploitation of this flaw allows an attacker to break out of the Chrome sandbox, which is designed to isolate web content from the underlying operating system. Given the CVSS score of 9.6, this represents a critical risk that could lead to full system compromise, unauthorized data access, and the potential for persistent malware installation on the host machine.

Immediate Action: Update Google Chrome to version 151.0.7922.72 or later immediately to apply the necessary security patches.

Proactive Monitoring: Monitor endpoint security logs for unusual process spawning or unexpected system calls originating from the Chrome renderer process.

Compensating Controls: Ensure that browser isolation policies are enforced and consider using endpoint detection and response (EDR) solutions to identify and block unauthorized sandbox escape attempts.

Public Exploit Available: No (exploit_available is false).

The vulnerability in the ANGLE component presents a significant threat to browser security by enabling sandbox escapes. Given the critical CVSS score, organizations must prioritize updating all instances of Google Chrome on macOS to the latest version. Timely patching is the only effective way to neutralize the risk of an attacker escalating privileges from a renderer compromise to full system access.