A remote sandbox escape vulnerability in Google Chrome allows unauthenticated attackers to compromise browser security via malicious web content.

This flaw involves insufficient input validation within the Dawn component, which allows an unauthenticated remote attacker to trigger a sandbox escape through a specially crafted HTML page.

Successful exploitation of this vulnerability permits an attacker to escape the browser sandbox, potentially leading to unauthorized system access or arbitrary code execution on the underlying host. Given the CVSS score of 7.1, this is classified as a high severity issue that poses a significant risk to endpoint integrity and organizational data security.

Immediate Action: Update Google Chrome to version 151.0.7922.72 or later immediately to apply the necessary security fixes for the Dawn component.

Proactive Monitoring: Monitor endpoint security logs for unusual browser activity or attempts to execute unauthorized processes originating from the Chrome browser process.

Compensating Controls: Ensure that browser-based security policies are enforced and utilize endpoint detection and response tools to identify and block potential sandbox escape attempts.

Public Exploit Available: No

The vulnerability represents a significant risk to browser-based security and must be addressed promptly. IT administrators should prioritize the deployment of the latest Chrome update across all managed environments to eliminate the potential for sandbox escape and prevent unauthorized access to host systems.