A high severity race condition vulnerability in Google Chrome could allow a remote attacker to execute arbitrary code on the host system via a malicious website.

The flaw is a race condition (CWE-362) within the ANGLE graphics library. A remote, unauthenticated attacker can trigger this condition through a specially crafted HTML page, requiring user interaction to visit the site, to escape the browser sandbox and execute arbitrary code.

Successful exploitation allows an attacker to bypass the browser sandbox, leading to potential full system compromise, data theft, and installation of persistent malware. While the CVSS score is 7.5, the potential for sandbox escape and arbitrary code execution creates a significant risk to organizational endpoints and sensitive user data.

Immediate Action: Update all installations of Google Chrome to version 152.0.7977.65 or later to apply the necessary security patches.

Proactive Monitoring: Monitor endpoint logs for unusual child process creation or unexpected network connections originating from the browser process.

Compensating Controls: Ensure that browser security settings are strictly enforced via Group Policy or MDM, and consider utilizing endpoint detection and response (EDR) solutions to identify and block suspicious browser-based exploit behavior.

Public Exploit Available: No

This vulnerability presents a significant risk to browser security due to the potential for sandbox escape. Administrators must prioritize the deployment of the latest Chrome update across all managed environments to eliminate this attack vector. Given the nature of browser-based threats, immediate patching is the most effective defense against potential exploitation attempts.