A use-after-free vulnerability in the Google Chrome GPU component allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page, presenting a high severity risk.

This is a use-after-free weakness classified under CWE-416, triggered within the GPU component and requiring an unauthenticated remote attacker with a compromised renderer process alongside user interaction.

A successful exploit of this vulnerability could allow an attacker to escape the browser sandbox, potentially leading to arbitrary code execution on the underlying operating system. This compromise threatens organizational data confidentiality, system integrity, and endpoint availability. The high CVSS score of 8.3 underscores the severe potential impact of a full sandbox breakout.

Immediate Action: Update Google Chrome to version 148.0.7778.96 or later by following the vendor security advisory.

Proactive Monitoring: Monitor client endpoints for anomalous browser process behavior, unauthorized system modifications, or unexpected application crashes associated with Chrome.

Compensating Controls: Ensure endpoint detection and response agents are active to catch anomalous process spawning resulting from potential browser sandbox escapes.

Public Exploit Available: false

Given the high severity score and potential for complete system compromise via sandbox evasion, administrators must prioritize updating all browser instances. Apply the vendor security updates immediately to mitigate risk and protect enterprise endpoints.