A use after free vulnerability in Google Chrome could allow a remote attacker to execute arbitrary code on the affected system.

This is a use after free vulnerability within the Input component of the browser. The vulnerability does not require authentication, but it does require user interaction to trigger the flaw.

Successful exploitation of this vulnerability allows an attacker to execute arbitrary code within the context of the browser, potentially leading to full system compromise. Given the CVSS score of 8.8, this vulnerability poses a significant risk to organizational security, as it could facilitate data exfiltration or the installation of malicious software on user endpoints.

Immediate Action: Update Google Chrome to version 151.0.7922.72 or later immediately to resolve the memory management flaw.

Proactive Monitoring: Monitor browser logs and endpoint security telemetry for unusual crash patterns or unauthorized child process spawning.

Compensating Controls: Ensure endpoint protection software is active and configured to detect and block malicious code execution patterns.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a high risk to browser security. Administrators should prioritize the deployment of the latest Chrome stable channel update across all managed workstations to neutralize the threat posed by this memory corruption flaw.