A remote code execution vulnerability in Google Chrome, caused by a use after free flaw in WebRTC, poses a significant risk to user systems.

This is a use after free vulnerability (CWE-416) within the WebRTC component. An unauthenticated remote attacker can trigger this memory corruption issue by enticing a user to visit a specially crafted HTML page, potentially leading to arbitrary code execution within the browser sandbox.

The ability for a remote attacker to execute arbitrary code on a user machine represents a critical security failure. Successful exploitation could lead to full system compromise, data theft, or the installation of malicious software, directly impacting organizational security posture. While the CVSS score of 8.8 is categorized as High, the potential for arbitrary code execution necessitates immediate attention to prevent lateral movement within the network.

Immediate Action: Update all instances of Google Chrome to version 152.0.7977.75 or later immediately.

Proactive Monitoring: Monitor endpoint logs for unusual browser activity, unexpected process spawning from the Chrome executable, or recurring crashes in the WebRTC module.

Compensating Controls: Deploy endpoint protection solutions that can detect and block malicious code execution patterns and ensure users are restricted from executing untrusted scripts via browser hardening policies.

Public Exploit Available: No (exploit_available: false)

Given the potential for remote code execution, organizations should prioritize the deployment of the Chrome security update to all managed workstations. Administrators should verify that automatic update mechanisms are functioning correctly to ensure that all endpoints are patched against this memory corruption vulnerability without delay.