A use after free vulnerability in the Google Chrome Updater for macOS creates a high risk of unauthorized system access and code execution.

This is a use after free vulnerability (CWE-416) located in the Updater component of the browser. The vulnerability is accessible locally and does not require authentication or user interaction to facilitate an attack.

With a CVSS score of 8.4, this vulnerability poses a significant threat to macOS environments. Exploitation could allow an attacker to gain elevated privileges or execute malicious commands, resulting in a total loss of confidentiality, integrity, and availability on the compromised host.

Immediate Action: Update Google Chrome to version 151.0.7922.72 or later to address the vulnerable Updater component.

Proactive Monitoring: Monitor system logs for unexpected execution patterns or instability within the Chrome update process.

Compensating Controls: Utilize endpoint detection and response tools to monitor for unauthorized modifications to browser-related binaries.

Public Exploit Available: No

Due to the critical nature of the Updater component, administrators must treat this as a high-priority update. Immediate deployment of the patched version is required to secure macOS endpoints against potential exploitation.