An integer overflow vulnerability in Google Chrome on Mac and Windows prior to version 148.0.7778.96 creates a high severity risk of remote code execution or system compromise via heap corruption.

This is an integer overflow flaw affecting the ANGLE graphics translation layer in Google Chrome, triggered when an unauthenticated remote attacker entices a user to visit a crafted HTML page requiring user interaction.

A successful exploit of this vulnerability could allow an attacker to achieve heap corruption, leading to arbitrary code execution, complete system compromise, or application crashes. Given the CVSS score of 8.8, organizations face a high risk of operational disruption, potential data theft, and unauthorized access if browsers are left unpatched.

Immediate Action: Update Google Chrome to version 148.0.7778.96 or later across all managed Mac and Windows endpoints.

Proactive Monitoring: Monitor endpoint telemetry for anomalous browser crashes, unexpected child process termination, or unauthorized process spawning originating from browser execution threads.

Compensating Controls: Enforce secure web gateway policies to filter out known malicious domains and ensure endpoint protection platforms are active to detect post exploitation behavior.

Public Exploit Available: No - there is no confirmed public exploit in the available data.

System administrators must prioritize upgrading Google Chrome instances to the fixed version immediately. Due to the high CVSS score and the prevalence of web browsers as an attack vector, prompt deployment of the vendor security update is critical to mitigate the risk of remote heap corruption attacks.