A critical use after free vulnerability in the Google Chrome Dawn component allows remote attackers to bypass sandbox protections, posing a significant risk of system compromise.

This is a use after free vulnerability within the Dawn graphics component, which can be triggered by a remote, unauthenticated attacker through a specially crafted HTML page. Successful exploitation allows the attacker to escape the browser sandbox and execute arbitrary code.

The ability to escape the sandbox environment allows an attacker to transition from browser-based execution to host-level access. With a CVSS score of 8.8, this flaw represents a high-severity risk that could lead to full system compromise, data theft, or malware installation. Organizations should prioritize patching to prevent potential lateral movement within their internal networks.

Immediate Action: Update Google Chrome to version 146.0.7680.165 or later immediately to resolve the vulnerable Dawn component.

Proactive Monitoring: Monitor endpoint security logs for unusual process spawning or suspicious child processes originating from the Chrome browser executable.

Compensating Controls: Ensure that browser-based security policies are enforced via Group Policy or MDM to restrict the execution of unauthorized scripts and limit the browser attack surface.

Public Exploit Available: Unknown

This vulnerability presents a severe risk to end-user workstations and enterprise environments due to the potential for sandbox escape. IT administrators should treat this as a priority update and deploy the latest stable version of Google Chrome across all endpoints as soon as possible to mitigate the risk of remote code execution.