A critical heap-based buffer overflow in Google Chrome's WebGL component allows for remote code execution and sandbox escape, posing a severe risk to end-user systems.

This is a heap-based buffer overflow (CWE-122) within the WebGL graphics processing component. By persuading a user to visit a specially crafted HTML page, a remote attacker can trigger the overflow, execute arbitrary code, and escape the browser sandbox to gain access to the underlying operating system.

The ability to execute code outside the Chrome sandbox means that an attacker can gain full control over the user's local machine, leading to total compromise of confidentiality, integrity, and availability. With a CVSS score of 9.6, this vulnerability is extremely dangerous, as it can be leveraged to deliver malware, steal credentials, or pivot into the internal corporate network.

Immediate Action: Update Google Chrome to version 152.0.7977.65 or later immediately to apply the necessary security patches.

Proactive Monitoring: Use endpoint detection and response (EDR) tools to monitor for suspicious process spawning or abnormal memory usage patterns associated with the browser process.

Compensating Controls: Deploy browser-based security policies that restrict the execution of WebGL or disable unnecessary browser features until the update can be applied.

Public Exploit Available: No

Browser-based remote code execution vulnerabilities are high-priority targets for attackers. Organizations should ensure that automated update mechanisms are functioning correctly and verify that all desktop endpoints are running the latest version of Chrome to mitigate this risk.