A heap buffer overflow in the Google Chrome GPU component allows an attacker to potentially execute arbitrary code through a specially crafted web page.

The vulnerability is a heap buffer overflow (CWE-122) within the GPU processing logic. It requires an attacker to entice a user to visit a malicious site, where the browser's interaction with the GPU triggers the memory corruption error.

A successful exploit could result in the execution of arbitrary code within the context of the browser, potentially leading to unauthorized system access or data theft. With a CVSS score of 8.8, this is a significant security risk for any organization relying on Chrome for daily operations, as it could be used as a vector for malware delivery.

Immediate Action: Update all instances of Google Chrome to the latest stable release (version 146.0.7680.178 or later) to ensure the memory safety fix is applied.

Proactive Monitoring: Utilize endpoint management tools to audit browser versions across the enterprise and identify any systems running outdated, vulnerable versions of Chrome.

Compensating Controls: Use browser security policies (e.g., via Group Policy or MDM) to disable unnecessary features or restrict access to untrusted domains that may attempt to exploit GPU-related browser vulnerabilities.

Public Exploit Available: No

Chrome updates should be treated as a critical maintenance task. Administrators must ensure that the update to version 146.0.7680.178 is deployed rapidly across all corporate endpoints to mitigate the risk posed by this memory corruption flaw.