A heap corruption vulnerability in Google Chrome, caused by an integer overflow in the ANGLE component, poses a significant risk of remote code execution or system instability.

This is an integer overflow flaw within the ANGLE graphics engine. An unauthenticated remote attacker can exploit this via a specially crafted HTML page to induce heap corruption.

The ability to trigger heap corruption remotely presents a severe risk to organizational endpoints. Successful exploitation could lead to arbitrary code execution, resulting in full system compromise, data exfiltration, or persistent malware installation. Given the CVSS score of 8.8, this vulnerability is classified as High, reflecting the potential for significant impact on confidentiality, integrity, and availability.

Immediate Action: Update all Google Chrome browser instances to version 146.0.7680.153 or later immediately.

Proactive Monitoring: Monitor endpoint security logs for unusual browser crashes or unexpected process behavior associated with the Google Chrome executable.

Compensating Controls: Ensure that endpoint protection software is active and configured to block known malicious web content, as the attack vector requires user interaction with a crafted HTML page.

Public Exploit Available: Unknown

Given the nature of browser-based vulnerabilities and the potential for remote exploitation, organizations should prioritize the deployment of the Chrome update across all workstations. Users should be encouraged to restart their browsers to ensure the patch is fully applied, thereby mitigating the risk of heap corruption attacks.