A use-after-free vulnerability in Google Chrome on Windows allows a local attacker to achieve complete system compromise through privilege escalation.

This flaw is a use-after-free vulnerability in the Chromoting component, categorized under CWE-416. It can be triggered by a local attacker via a malicious file with required user interaction.

A successful exploit of this vulnerability grants an attacker complete control over the affected system, leading to total confidentiality, integrity, and availability loss. With a CVSS score of 7.8, the severity is high, reflecting the potential for local privilege escalation to compromise the entire host operating system and any corporate resources accessed from it.

Immediate Action: Update Google Chrome on Windows to version 148.0.7778.96 or later immediately.

Proactive Monitoring: Monitor endpoint detection and response logs for anomalous process execution patterns originating from the browser application.

Compensating Controls: Restrict user execution privileges on workstations and enforce strict application whitelisting policies to limit the execution of unauthorized malicious files.

Public Exploit Available: No (no public exploit is currently confirmed in the available data).

Organizations must treat this high-severity vulnerability with urgency by deploying the latest browser updates across all Windows endpoints. Prioritize the application of vendor security patches immediately to prevent potential local privilege escalation attacks.