A heap corruption vulnerability in Google Chrome allows unauthenticated attackers on a privileged network to potentially achieve full system impact.

The flaw is categorized as CWE-20, improper input validation, within the Variations component. An unauthenticated attacker positioned on an adjacent network can trigger heap corruption through specially crafted network traffic.

Successful exploitation of this vulnerability can lead to a complete compromise of the affected browser instance. Given the CVSS score of 7.5, the risk is rated as High, as it could facilitate unauthorized access, data theft, or system instability for the user. While the attack requires an adjacent network position, the potential for total technical impact necessitates prompt attention to protect enterprise endpoints.

Immediate Action: Update Google Chrome to version 151.0.7922.72 or later immediately to apply the necessary security patches.

Proactive Monitoring: Monitor network traffic for anomalous patterns or unexpected heap-related crashes in browser processes that may indicate exploitation attempts.

Compensating Controls: Ensure that network segmentation is enforced to limit the exposure of sensitive endpoints to potentially untrusted or unauthorized devices on the local network.

Public Exploit Available: No (exploit_available: false)

The severity of this flaw, combined with the potential for total technical impact, warrants immediate action. Organizations should prioritize updating all Google Chrome installations across their environment to the latest stable release to eliminate the risk of heap corruption and subsequent exploitation.