Google Chrome versions prior to 151.0.7922.72 are vulnerable to a critical sandbox escape flaw that could allow a remote attacker to gain full system control.

This vulnerability is an inappropriate implementation flaw within the MHTML processing engine. A remote, unauthenticated attacker can exploit this via a crafted HTML page to escape the browser sandbox after the renderer process has been compromised.

The ability to escape the browser sandbox poses an extreme risk to organizational security, as it allows attackers to bypass core browser protections and potentially execute arbitrary code on the underlying host operating system. Given the CVSS score of 9.6, this vulnerability is classified as critical, representing a high probability of total system compromise, data theft, and lateral movement within the network.

Immediate Action: Update all instances of Google Chrome on macOS to version 151.0.7922.72 or later immediately.

Proactive Monitoring: Review endpoint security logs for unusual process execution patterns or unexpected child processes originating from the Chrome browser.

Compensating Controls: Ensure that browser-based security policies, such as site isolation and strict content security policies, are enforced via centralized management tools.

Public Exploit Available: Unknown.

Due to the critical nature of this sandbox escape vulnerability, all administrators must prioritize the deployment of the latest Chrome update across all macOS endpoints. Failure to patch this vulnerability leaves systems exposed to potential remote code execution and total system takeover by attackers.