Google Chrome versions prior to 151.0.7922.72 are vulnerable to a sandbox escape flaw that could allow a remote attacker to gain elevated control over the host system.

This vulnerability is caused by a race condition (CWE-362) in the Downloads component of the browser. A remote, unauthenticated attacker can exploit this flaw by forcing a user to interact with a malicious HTML page, which facilitates a sandbox escape following a renderer process compromise.

The potential for a sandbox escape represents a severe security risk, as it effectively bypasses the browser's primary security boundary between the web content and the underlying operating system. With a CVSS score of 9.6, this vulnerability could lead to full system compromise, unauthorized data access, and the potential for persistent malware installation, posing a significant risk to organizational integrity and user privacy.

Immediate Action: Update all Google Chrome instances on macOS to version 151.0.7922.72 or later immediately to resolve the underlying race condition.

Proactive Monitoring: Review endpoint security logs for anomalous browser behavior or unexpected process execution patterns that may indicate a sandbox escape attempt.

Compensating Controls: Ensure that the Principle of Least Privilege is enforced on all workstations, and utilize advanced endpoint detection and response (EDR) solutions to identify and block unauthorized process spawning from browser-related threads.

Public Exploit Available: No (exploit_available: false)

Given the critical nature of this flaw and its potential for sandbox escape, organizations must prioritize the deployment of the provided security update. Failure to patch allows a window of opportunity for attackers to leverage web-based content to pivot into the host operating system, making immediate patching the only reliable method for mitigating this risk.