A type confusion vulnerability in Google Chrome WebRTC prior to version 148.0.7778.96 permits remote attackers to achieve arbitrary code execution via crafted web content.

This flaw involves a type confusion weakness within the WebRTC component, which can be triggered by an unauthenticated attacker interacting with a user through a maliciously crafted HTML page.

A successful exploit of this vulnerability could allow an attacker to execute arbitrary code within the context of the browser sandbox, potentially leading to system compromise or data theft. This risk justifies the high CVSS score of 8.8, reflecting severe impacts on confidentiality, integrity, and availability.

Immediate Action: Update Google Chrome to version 148.0.7778.96 or later as provided by the vendor.

Proactive Monitoring: Monitor browser update deployment metrics across the enterprise to ensure rapid remediation of endpoints.

Compensating Controls: Restrict internet browsing on critical systems or utilize network filtering to block access to untrusted websites.

Public Exploit Available: false

Organizations must prioritize applying the Google Chrome security update immediately to mitigate the risk of remote code execution. Prompt deployment across all client endpoints will neutralize this browser-based attack vector.