A heap buffer overflow vulnerability in Google Chrome ANGLE prior to version 148.0.7778.96 allows remote attackers to achieve sandbox escape and potential system compromise via crafted HTML content.

This vulnerability is a heap buffer overflow (CWE-122) within the ANGLE graphics engine, triggered when a remote attacker who has compromised the renderer process interacts with a crafted HTML page requiring user interaction.

A successful exploit of this heap buffer overflow can result in a complete security sandbox escape, granting the attacker elevated capabilities on the underlying operating system. This level of compromise threatens data confidentiality, integrity, and system availability. The high severity CVSS score of 8.3 accurately reflects the potential for severe system level impact despite requiring user interaction.

Immediate Action: Update Google Chrome to version 148.0.7778.96 or later immediately via the official browser update channel.

Proactive Monitoring: Monitor endpoint telemetry for anomalous browser crash patterns, unexpected child process spawning, or unauthorized execution chains originating from the browser process.

Compensating Controls: Enforce strict browsing policies and utilize endpoint security solutions that monitor for abnormal renderer process behavior if immediate browser updates are not feasible.

Public Exploit Available: false

Given the severity of potential sandbox escapes involving web browsers, administrators must prioritize updating all browser instances to the patched version. Ensuring timely deployment of browser security updates prevents exploitation chains that leverage renderer compromises to target the host system.