A critical use after free vulnerability in Google Chrome allows remote attackers to bypass sandbox protections and gain full system control, necessitating an immediate update.

This is a use after free flaw (CWE-416) within the Payments component of Chrome. It can be triggered by an unauthenticated remote attacker who lures a user into visiting a specially crafted HTML page, leading to a sandbox escape.

The capability to escape the browser sandbox represents a critical security failure, as it allows arbitrary code execution on the underlying host system. Given the CVSS score of 9.6, this vulnerability poses a severe risk of data theft, malware deployment, and total compromise of compromised workstations.

Immediate Action: Update Google Chrome to version 151.0.7922.109 or later immediately to address the memory management flaw.

Proactive Monitoring: Review endpoint security logs for unusual process spawning behavior or unexpected network connections originating from the Chrome browser process.

Compensating Controls: Ensure that endpoint detection and response systems are configured to flag unauthorized attempts to access sensitive system files or execute secondary payloads from browser processes.

Public Exploit Available: Unknown

This vulnerability is classified as critical due to the potential for full system compromise following a sandbox breakout. Administrators should prioritize the deployment of the latest Chrome update across all managed devices to neutralize this risk.