Google Chrome versions prior to 151.0.7922.72 are vulnerable to a use after free flaw that could allow a remote attacker to execute arbitrary code on the host system.

The vulnerability is a use after free (CWE-416) condition residing within the DevTools component of Google Chrome. It allows an unauthenticated remote attacker to trigger arbitrary code execution by convincing a user to navigate to a specifically crafted HTML page.

The exploitation of this vulnerability can lead to a complete compromise of the browser sandbox, potentially resulting in unauthorized data access or malicious code execution. With a CVSS score of 7.5, this is considered a high severity risk that could lead to significant system instability or data exposure if exploited by an attacker.

Immediate Action: Update all Google Chrome instances to version 151.0.7922.72 or later to apply the necessary security patches.

Proactive Monitoring: Review endpoint security logs for anomalous browser behavior or unexpected crashes that may indicate an attempt to trigger the use after free condition.

Compensating Controls: Utilize browser isolation technologies or endpoint protection platforms that can detect and block malicious script execution or exploit attempts originating from untrusted web content.

Public Exploit Available: No

Given the potential for remote code execution, organizations should prioritize the deployment of the latest Chrome update across all managed workstations. Rapid patching is essential to ensure that the browser sandbox remains effective against modern exploit techniques.