A use after free vulnerability in Google Chrome Chromoting could allow a remote attacker to execute arbitrary code on the affected system.

This is a use after free vulnerability within the Chromoting component. The attack vector is network based and requires user interaction, but it does not require prior authentication to trigger.

The vulnerability carries a CVSS score of 8.8, indicating a high severity risk. Successful exploitation could lead to total system compromise, including the execution of malicious code, unauthorized access to sensitive data, and potential lateral movement within the network.

Immediate Action: Update Google Chrome to version 151.0.7922.173 or the latest available stable release immediately.

Proactive Monitoring: Monitor endpoint logs for suspicious child process spawning or unexpected browser crashes that may indicate exploitation attempts.

Compensating Controls: Ensure that browser security settings, such as site isolation and sandboxing, are fully enabled and enforced via group policy.

Public Exploit Available: No

Given the potential for arbitrary code execution and the high CVSS score, organizations must prioritize patching all instances of Google Chrome. Deployment of the latest version is the only effective way to neutralize this memory safety risk.