An inappropriate implementation flaw in the Chromoting component of Google Chrome on Linux platforms presents a high risk of unauthorized local control.

This vulnerability involves an inappropriate implementation within the Chromoting functionality. It utilizes a local attack vector and does not require user interaction or authentication to trigger.

With a CVSS score of 8.4, this vulnerability enables an attacker with local access to the system to potentially escalate privileges or gain control over browser-related processes. This poses a significant risk to the confidentiality and integrity of workstations, particularly in environments where Linux-based endpoints are shared or utilized by multiple users.

Immediate Action: Update all Google Chrome installations on Linux systems to version 151.0.7922.72 or later.

Proactive Monitoring: Audit local system logs for unauthorized attempts to access or manipulate Chromoting or browser-related services.

Compensating Controls: Implement strict access control lists on Linux endpoints to limit the number of users capable of executing or interacting with the Chrome binary.

Public Exploit Available: No

Linux-based endpoints running Chrome should be updated immediately. Prioritize patching for systems that handle sensitive data or allow for multi-user access to mitigate the risk of local exploitation.