A critical use-after-free vulnerability in the Google Chrome Proxy component poses a significant risk of remote code execution for all users on affected versions.

This is a use-after-free vulnerability (CWE-416) found in the Proxy handling logic. It is an unauthenticated, remote vulnerability that requires user interaction to exploit, typically by navigating the victim to a malicious URL.

The exploitation of this memory corruption vulnerability can lead to remote code execution, granting an attacker the ability to perform actions as the logged-in user. With a CVSS score of 8.3, this vulnerability underscores the need for robust browser security management to prevent the compromise of sensitive corporate credentials and data.

Immediate Action: Update Google Chrome to version 147.0.7727.101 or later to ensure the Proxy module is properly patched.

Proactive Monitoring: Utilize endpoint logging to track browser-related errors and monitor for attempts to access suspicious external proxy configurations or domains.

Compensating Controls: Deploy organizational-level network filtering to block access to known malicious domains and prevent users from reaching sites that may host exploit code.

Public Exploit Available: No (exploit_available: false)

Given the critical nature of this memory corruption flaw, all systems running the affected versions of Google Chrome must be updated immediately. Prioritizing this update will mitigate the risk of remote code execution and maintain the integrity of the browser environment.