A high-severity use after free vulnerability in Google Chrome allows remote attackers to execute arbitrary code or cause heap corruption via malicious web content.

This is a use after free vulnerability (CWE-416) within the Network component. It permits an unauthenticated remote attacker to perform heap corruption by enticing a user to visit a specially crafted HTML page.

The vulnerability carries a CVSS score of 8.8, indicating a high risk of compromise. Successful exploitation could lead to total loss of confidentiality, integrity, and availability, potentially allowing an attacker to execute code within the context of the user session, leading to significant system compromise or data theft.

Immediate Action: Update Google Chrome to version 146.0.7680.153 or later immediately to resolve the memory management flaw.

Proactive Monitoring: Monitor browser-related crash logs and security event telemetry for signs of unexpected memory corruption or suspicious navigation patterns.

Compensating Controls: Use enterprise browser management policies to restrict execution of untrusted scripts and ensure that security features like site isolation are strictly enforced.

Public Exploit Available: No (exploit_available: false)

Given the high severity of this vulnerability and the ubiquity of Google Chrome in enterprise environments, organizations should treat this update with high priority. Apply the provided patch across all workstations and managed browser instances to neutralize the threat of remote heap corruption.