Google Chrome versions prior to 147.0.7727.55 are affected by an integer overflow vulnerability in the Media component that could lead to heap corruption and remote code execution.

This is an integer overflow flaw (CWE-472) located in the Media handling component of the browser. An unauthenticated remote attacker can exploit this by enticing a user to process a specially crafted video file, which triggers heap corruption.

The exploitation of this vulnerability can result in full system compromise, as heap corruption often facilitates arbitrary code execution. Given the CVSS score of 8.8, this flaw represents a high risk to organizational security, potentially leading to unauthorized data access, malware installation, or persistent system access if successful.

Immediate Action: Update all instances of Google Chrome to version 147.0.7727.55 or later immediately.

Proactive Monitoring: Review endpoint security logs for anomalous browser activity or crash reports that may indicate exploitation attempts related to media processing.

Compensating Controls: Ensure that endpoint protection software is configured to detect malicious file execution and that users are restricted from executing untrusted media files from unknown sources.

Public Exploit Available: Unknown.

This vulnerability poses a significant risk to the integrity and security of workstations running the Google Chrome browser. Organizations should prioritize patching Chrome across their environment to eliminate the risk of heap corruption attacks. Given the nature of media-based exploits, maintaining an updated browser is the most effective defense against this and similar browser-based threats.