A high-severity vulnerability in the Google Chrome ANGLE component on Mac allows remote code execution via malicious web content.

The vulnerability is caused by improper input validation in the ANGLE graphics component. An unauthenticated remote attacker can trigger this flaw by enticing a user to visit a specially crafted HTML page, potentially leading to arbitrary code execution outside the browser sandbox.

The ability for a remote attacker to execute arbitrary code on a user machine poses a significant risk to organizational security. Successful exploitation could lead to full system compromise, unauthorized data exfiltration, or the installation of persistent malware, justifying the high CVSS score of 8.8.

Immediate Action: Update Google Chrome to version 152.0.7977.65 or later immediately to incorporate the security patches provided by Google.

Proactive Monitoring: Review endpoint security logs for anomalous browser behavior or unexpected process execution patterns following web browsing activity.

Compensating Controls: Ensure that browser security features like site isolation are enabled and consider using endpoint protection software that can detect and block malicious browser-based exploit attempts.

Public Exploit Available: Unknown

Given the potential for remote code execution, this vulnerability represents a severe risk to end-user workstations. System administrators should prioritize the deployment of the Google Chrome update to all Mac users to eliminate this attack vector and prevent potential system compromise.