A high severity use after free vulnerability in Google Chrome allows remote attackers to achieve heap corruption, posing a significant risk to browser integrity and user data.

This vulnerability is a use after free condition within the MediaStream component. A remote, unauthenticated attacker can exploit this flaw by enticing a user to visit a specially crafted HTML page, leading to potential heap corruption.

The exploitation of this vulnerability can lead to arbitrary code execution or significant system instability, as indicated by the CVSS score of 8.8. Such an outcome could result in full compromise of the user workstation, unauthorized access to sensitive local or session data, and potential lateral movement within the corporate network.

Immediate Action: Update Google Chrome to version 146.0.7680.71 or later immediately to resolve the underlying memory management flaw.

Proactive Monitoring: Monitor endpoint security logs for unusual browser crashes or unexpected process behavior that may indicate exploitation attempts.

Compensating Controls: While browser-level patches are the primary defense, deploying robust endpoint detection and response (EDR) solutions can help identify and block malicious activity originating from compromised web pages.

Public Exploit Available: Unknown

Given the high CVSS score and the widespread deployment of Google Chrome, organizations should prioritize this update across all managed assets. Administrators must ensure that the browser is updated to version 146.0.7680.71 or higher to effectively mitigate the risk of heap corruption and potential code execution.