A high-severity heap buffer overflow in Google Chrome allows remote attackers to compromise browser integrity through malicious web content.

This vulnerability is a heap buffer overflow (CWE-122) within the ANGLE graphics library component of the browser. It is remotely exploitable by an unauthenticated attacker who lures a user to visit a specifically crafted HTML page.

The vulnerability carries a CVSS score of 8.8, indicating a high risk to organizational security. Successful exploitation could lead to arbitrary code execution, complete system compromise, or unauthorized access to sensitive user data stored within the browser environment.

Immediate Action: Update all Google Chrome instances to version 146.0.7680.153 or later immediately.

Proactive Monitoring: Monitor endpoint security logs for abnormal browser process behavior or unexpected crash reports associated with the ANGLE graphics engine.

Compensating Controls: Deploy browser-based security policies that restrict navigation to untrusted or newly registered domains and ensure that the browser is running with the latest security baseline configurations.

Public Exploit Available: No (exploit_available: false)

Given the potential for remote code execution and the severity of the flaw, organizations should prioritize the deployment of the Chrome update across all endpoints. Security teams must ensure that automatic updates are enabled and verify that the target version is successfully applied to prevent exploitation of the heap corruption vector.