A critical integer overflow vulnerability in Google Chrome could allow a remote attacker to achieve heap corruption by tricking a user into processing a malicious video file.

This vulnerability is an integer overflow (CWE-472) located in the browser Media component. It requires no authentication from the attacker, though it does require user interaction (UI:R) to initiate the processing of the malicious video file.

The vulnerability carries a CVSS score of 8.8, indicating a high level of severity due to the potential for total impact on confidentiality, integrity, and availability. Successful exploitation could lead to arbitrary code execution or system instability, potentially resulting in unauthorized data access or complete compromise of the workstation running the affected browser.

Immediate Action: Update Google Chrome to the latest stable version as specified in the official Google Chrome security release notes.

Proactive Monitoring: Review endpoint security logs for unusual browser process behavior or crashes related to media parsing components.

Compensating Controls: Utilize endpoint protection platforms that can detect and block malicious file execution and implement browser-based security policies to restrict the execution of untrusted media content.

Public Exploit Available: Unknown.

Given the severity of this vulnerability and its potential for total system compromise, organizations should prioritize the deployment of the latest Chrome security updates across all endpoints. Users should exercise caution when viewing untrusted video content until the update is applied.