A use after free vulnerability in Google Chrome allows unauthenticated remote attackers to escape the browser sandbox, posing a significant risk to system integrity.

This is a use after free flaw within the ANGLE graphics engine, which can be triggered by an unauthenticated remote attacker through a specially crafted HTML page to escape the browser sandbox.

Successful exploitation allows an attacker to bypass the browser sandbox, which is a critical security boundary designed to isolate web content from the underlying operating system. While the CVSS score of 7.1 reflects a High severity, the ability to escape the sandbox significantly increases the potential for unauthorized system access, data exfiltration, or the installation of persistent malware on the host machine.

Immediate Action: Update Google Chrome to version 151.0.7922.72 or later immediately.

Proactive Monitoring: Monitor endpoint security logs for unusual browser process behavior or unauthorized attempts to access sensitive file system directories.

Compensating Controls: Ensure that browser security settings are configured to high, and utilize endpoint detection and response tools to identify and block suspicious child processes spawned by browser applications.

Public Exploit Available: Unknown

Given the capability for sandbox escape, this vulnerability represents a significant risk to user workstations and enterprise environments. Security administrators should prioritize the deployment of the browser update across all endpoints to ensure the vulnerability is remediated before potential exploit code is developed or weaponized.