A high-severity use-after-free vulnerability in Google Chrome allows local attackers to execute arbitrary code, posing a significant risk to endpoint integrity.

This vulnerability is a use-after-free flaw (CWE-416) within the Views component of the browser. It allows a local attacker to bypass sandbox protections and execute arbitrary code through specific UI interactions.

The ability for an attacker to execute arbitrary code outside the browser sandbox represents a critical breach of the security boundary, potentially granting an attacker full control over the local system. With a CVSS score of 8.6, this flaw carries a high impact on system confidentiality, integrity, and availability. Compromise of this nature could lead to lateral movement within the network, theft of sensitive credentials, or the deployment of persistent malware.

Immediate Action: Update all instances of Google Chrome to version 153.0.8010.36 or later immediately to incorporate the necessary security patches.

Proactive Monitoring: Monitor endpoint security logs for unusual process execution patterns or attempts to interact with browser UI components that deviate from standard user behavior.

Compensating Controls: Ensure that endpoint protection software is active and configured to detect unauthorized code execution or memory exploitation attempts.

Public Exploit Available: Unknown.

Given the potential for sandbox escape and subsequent code execution, this vulnerability poses an unacceptable risk to enterprise workstations. IT administrators should prioritize the deployment of the 153.0.8010.36 update across all managed devices. Regular browser patching is essential to maintaining the security boundary between web content and the host operating system.