A high-severity use after free vulnerability in Google Chrome allows unauthenticated attackers on the local network to execute arbitrary code within the browser sandbox.

This is a use after free flaw (CWE-416) within the Cast component, which can be triggered by an unauthenticated attacker located on the same local network segment as the victim.

The ability for a remote attacker to execute arbitrary code within the browser sandbox poses a significant risk to data confidentiality and integrity. Given the CVSS score of 7.5, this vulnerability is classified as High, as it could facilitate the theft of browser-stored credentials, session tokens, or internal network reconnaissance.

Immediate Action: Update Google Chrome to version 147.0.7727.138 or later immediately to resolve the vulnerable memory management issue.

Proactive Monitoring: Monitor network traffic for unusual Cast-related protocols or unexpected connections originating from untrusted devices on the local area network.

Compensating Controls: Restrict local network access for sensitive systems and ensure that host-based firewalls are configured to block unauthorized traffic from untrusted local segments.

Public Exploit Available: No.

Organizations should prioritize the deployment of the latest Chrome browser updates across all endpoints. Because this vulnerability allows for code execution via network traffic, administrators must treat this as a critical path to ensuring the security of browser-based sessions and local network integrity.