A critical vulnerability in Google Chrome allows remote attackers to perform out of bounds memory reads through malicious video files, potentially leading to sensitive data exposure.

This issue involves insufficient data validation within the Media component of Chrome. The vulnerability is triggered when an unauthenticated remote attacker provides a crafted video file that the browser processes, resulting in an out of bounds memory read.

The vulnerability carries a CVSS score of 8.1, indicating a high risk to organizational security. Successful exploitation could allow an attacker to bypass memory protections and access sensitive information residing in browser memory, which may include session tokens, credentials, or other private user data. This poses a significant threat to user privacy and enterprise data integrity.

Immediate Action: Update all instances of Google Chrome to version 147.0.7727.55 or later to resolve the underlying memory validation flaw.

Proactive Monitoring: Review endpoint security logs for unusual browser crashes or unexpected process behavior associated with media rendering components.

Compensating Controls: Deploy network-level content filtering or endpoint protection software capable of identifying and blocking malformed media files before they reach the browser.

Public Exploit Available: Unknown

Given the potential for unauthorized memory access, administrators should treat this update as a priority deployment. Organizations must ensure that automatic updates are enabled for all Chrome browser instances and verify that the current version is at or above 147.0.7727.55 to mitigate the risk of data leakage.