A critical integer overflow in Google Chrome WebRTC permits unauthenticated remote attackers to achieve arbitrary code execution through malicious web content.

This is an integer overflow vulnerability (CWE-190) located within the WebRTC implementation of Chrome. The flaw allows an unauthenticated remote attacker to execute arbitrary code within the browser sandbox by enticing a user to navigate to a specifically crafted HTML page.

Successful exploitation of this vulnerability enables a remote attacker to execute arbitrary code on the victim machine. Given the CVSS score of 8.8, this poses a significant risk to organizational security, as it could facilitate unauthorized system access, data theft, or the installation of persistent malware.

Immediate Action: Update all instances of Google Chrome to the latest stable version beyond 152.0.7977.65 immediately to address the integer overflow.

Proactive Monitoring: Monitor endpoint logs for unusual browser activity, process spawning from the Chrome sandbox, or unexpected network connections originating from browser-related processes.

Compensating Controls: While no direct virtual patch exists for client-side browser memory flaws, enforcing endpoint detection and response (EDR) solutions can help identify and block suspicious child processes initiated by the browser.

Public Exploit Available: No (the vulnerability is not currently associated with a public exploit or weaponized module).

The severity of this vulnerability, combined with its potential for arbitrary code execution, necessitates immediate patching across all workstation environments. IT administrators should prioritize the deployment of the latest Chrome security updates to ensure the sandbox protection remains effective against this integer overflow vector.