A critical integer overflow vulnerability in the Google Chrome V8 engine exposes users to potential heap corruption and remote code execution if a user visits a malicious website.

This is an integer overflow flaw (CWE-472) located within the V8 JavaScript engine. An unauthenticated remote attacker can exploit this via a crafted HTML page, leading to heap corruption which may facilitate arbitrary code execution.

The vulnerability carries a CVSS score of 8.8, indicating a high risk to organizational security. Successful exploitation could lead to full system compromise, unauthorized data access, or the deployment of malware on affected endpoints, posing a significant threat to user privacy and corporate data integrity.

Immediate Action: Update Google Chrome to version 145.0.7632.109 or later across all managed devices.

Proactive Monitoring: Monitor endpoint security logs for unusual process behavior or unexpected crashes in the Chrome browser, which may indicate attempted exploitation.

Compensating Controls: Utilize browser security policies to restrict the execution of untrusted scripts and ensure that endpoint protection platforms are fully updated to detect malicious patterns associated with browser-based exploits.

Public Exploit Available: No — exploit_available (false).

Given the critical role of the browser as a primary attack vector, organizations must prioritize the rollout of this update to all workstations. The potential for heap corruption makes this an attractive target for threat actors, and immediate application of the patch is the only effective way to eliminate the vulnerability.