An out of bounds read and write vulnerability in Google Chrome prior to version 148.0.7778.96 permits remote code execution, posing a high security risk to end user workstations.

This is an out of bounds read and write flaw within the V8 JavaScript engine. An unauthenticated remote attacker can trigger this issue by enticing a user to visit a specially crafted HTML page, leading to arbitrary code execution inside the browser sandbox.

A successful exploit of this vulnerability could allow an attacker to achieve arbitrary code execution on user systems within the browser sandbox context. Given the CVSS score of 8.8, the potential consequences include system compromise, data theft, or malware installation, which could result in significant business disruption and reputational damage.

Immediate Action: Update Google Chrome to version 148.0.7778.96 or later immediately.

Proactive Monitoring: Monitor endpoint software inventories to ensure all instances of Google Chrome are running the latest patched version.

Compensating Controls: Enforce safe browsing policies and utilize network defenses to restrict access to untrusted websites until patches can be deployed.

Public Exploit Available: false

Given the high CVSS score and the prevalence of web browsers in enterprise environments, security teams must prioritize updating Google Chrome across all endpoints. Immediate deployment of the vendor security update is essential to mitigate the risk of remote code execution.