A vulnerability in Google Chrome allows a remote attacker who has already compromised the renderer process to perform privilege escalation via a malicious web page.

The vulnerability involves insufficient policy enforcement within the Settings component of Google Chrome. An attacker who has successfully compromised the renderer process can leverage this flaw to escalate privileges by tricking a user into navigating to a crafted HTML page.

Successful exploitation of this vulnerability allows an attacker to escalate privileges within the browser environment, potentially bypassing security boundaries. Given the high CVSS score of 7.5, this flaw poses a significant risk to user data confidentiality and integrity, as it facilitates further unauthorized actions within the browser context.

Immediate Action: Update Google Chrome to version 151.0.7922.72 or later immediately to apply the necessary policy enforcement patches.

Proactive Monitoring: Security teams should monitor endpoint logs for unusual browser activity or frequent crashes of the renderer process, which may indicate attempted exploitation.

Compensating Controls: Ensure that users operate with the principle of least privilege on their workstations and utilize modern endpoint protection platforms to detect malicious web-based payloads.

Public Exploit Available: No (exploit_available: false)

This vulnerability represents a significant risk to browser security, despite the requirement for a prior renderer compromise. Administrators must prioritize updating all Chrome instances across the organization to version 151.0.7922.72 or higher to ensure the patch is applied and the attack surface is closed.