A high-severity use after free vulnerability in Google Chrome could allow a remote attacker to escape the browser sandbox, posing a significant threat to system integrity.

This is a use after free flaw in the Digital Credentials API that occurs when memory is improperly managed. An unauthenticated remote attacker who has already compromised the renderer process can leverage this vulnerability to escape the browser sandbox via a crafted HTML page.

Successful exploitation of this vulnerability permits a sandbox escape, which significantly elevates the risk of arbitrary code execution on the underlying host operating system. Given the CVSS score of 8.8, this flaw represents a major security risk that could lead to full system compromise, unauthorized data access, and potential lateral movement within the corporate network.

Immediate Action: Update all Google Chrome installations to version 146.0.7680.153 or later immediately to resolve the memory management flaw.

Proactive Monitoring: Monitor endpoint security logs for unusual process behavior or unexpected crashes of the Chrome renderer process, which may indicate attempted exploitation.

Compensating Controls: Ensure that browser-level security policies are enforced and utilize endpoint detection and response tools to identify and block suspicious child process spawning originating from the web browser.

Public Exploit Available: No (exploit_available: false)

The severity of this vulnerability, combined with the potential for sandbox escape, necessitates an urgent update cadence. IT administrators should prioritize the deployment of the patched Chrome version across all managed assets to mitigate the risk of remote exploitation and maintain the integrity of the browser security model.