Google Chrome for Mac is vulnerable to a critical sandbox escape flaw that could allow a remote attacker to achieve full system compromise.

This vulnerability is a race condition (CWE-362) located within the Downloads component of Chrome. An unauthenticated remote attacker can leverage a compromised renderer process to escape the browser sandbox and execute arbitrary code on the underlying host.

The ability for an attacker to escape the sandbox environment represents a total loss of security boundaries for the browser. Given the CVSS score of 9.6, this vulnerability poses a severe risk of data theft, unauthorized system access, and malware installation. Successful exploitation allows an attacker to move from a limited browser context to full control over the user's workstation.

Immediate Action: Update Google Chrome to version 151.0.7922.72 or later immediately across all Mac endpoints.

Proactive Monitoring: Monitor endpoint security logs for unusual process spawning behavior or unauthorized file system modifications originating from the Chrome browser process.

Compensating Controls: Ensure that users are operating with the principle of least privilege, as this limits the potential damage an attacker can inflict if a sandbox escape is successful.

Public Exploit Available: No

The severity of this vulnerability, combined with its potential for a full sandbox escape, necessitates immediate remediation. Administrators should prioritize the deployment of the latest Chrome update to all affected macOS systems to eliminate the risk of remote code execution and host system compromise.