A high-severity use after free vulnerability in Google Chrome could allow a remote attacker to execute arbitrary code on the victim system.

This is a use after free vulnerability located in the HTML rendering engine of Google Chrome. The vulnerability requires user interaction, such as visiting a malicious webpage, and can be exploited by an unauthenticated remote attacker.

The successful exploitation of this vulnerability can lead to arbitrary code execution, which grants an attacker the ability to compromise the confidentiality, integrity, and availability of the affected system. Given the CVSS score of 8.8, this flaw represents a significant risk to organizational endpoints, as it could facilitate malware installation or data exfiltration.

Immediate Action: Update Google Chrome to version 151.0.7922.109 or later as provided by the vendor.

Proactive Monitoring: Monitor browser-related crash logs and endpoint security telemetry for unusual process behavior originating from the Chrome executable.

Compensating Controls: Ensure that endpoint protection solutions are active and configured to block known malicious web content, which may mitigate the risk of a user navigating to a page designed to trigger this exploit.

Public Exploit Available: No

The high CVSS score underscores the severity of this browser-based vulnerability. System administrators should prioritize the deployment of the latest Chrome security updates across all managed devices to ensure protection against potential exploitation.