A race condition vulnerability in Google Chrome DevTools could allow a remote attacker to compromise system integrity through user-assisted interaction.

This flaw is a race condition (CWE-362) within the DevTools component. An attacker can exploit this vulnerability if they successfully convince a user to perform specific UI gestures and install a malicious extension.

The exploitation of this vulnerability can lead to object corruption, potentially resulting in unauthorized code execution or system instability. With a CVSS score of 7.5, this issue represents a significant risk, as it impacts the confidentiality, integrity, and availability of the user environment. Organizations relying on Chrome for business operations should prioritize updates to prevent potential browser-based attacks.

Immediate Action: Update Google Chrome to version 145.0.7632.45 or later to resolve the underlying race condition.

Proactive Monitoring: Monitor endpoint security logs for unauthorized browser extension installations or unexpected DevTools activity.

Compensating Controls: Enforce organizational policies that restrict the installation of browser extensions to verified, enterprise-approved sources.

Public Exploit Available: No (exploit_available: false)

While the requirement for user interaction reduces the probability of immediate mass exploitation, the potential for high impact necessitates prompt remediation. IT administrators should ensure all managed instances of Google Chrome are updated to the patched version as part of their standard patch management cycle.