A critical use after free vulnerability in Google Chrome allows remote attackers to bypass sandbox protections and potentially execute arbitrary code on the underlying system.

This vulnerability is a use after free error located within the ANGLE graphics library. The flaw can be triggered by an unauthenticated remote attacker who lures a user to visit a malicious HTML page.

The ability for an attacker to escape the browser sandbox represents a significant risk to organizational security. Successful exploitation could lead to full system compromise, unauthorized data access, and the potential for lateral movement within the network. With a CVSS score of 9.6, this vulnerability is classified as critical, necessitating immediate attention to prevent potential exploitation.

Immediate Action: Update all instances of Google Chrome to version 151.0.7922.72 or later immediately to incorporate the necessary security patches.

Proactive Monitoring: Monitor endpoint security logs for unusual process execution patterns or crashes originating from the browser environment, which may indicate attempted exploitation.

Compensating Controls: Ensure that endpoint protection software is fully updated to detect and block malicious web content, and consider utilizing browser isolation technologies if immediate patching is delayed.

Public Exploit Available: No

Given the critical nature of this flaw and its potential to compromise the browser sandbox, organizations must prioritize the deployment of the latest Chrome update across all workstations. Rapid remediation is essential to mitigate the risk of remote code execution and maintain the integrity of the endpoint environment.