A use-after-free vulnerability in Google Chrome's ANGLE component poses a high risk of arbitrary code execution for unauthenticated users.

This is a use-after-free vulnerability (CWE-416) within the ANGLE graphics library. The flaw can be triggered by an unauthenticated attacker via a specially crafted web page, requiring user interaction to execute.

Successful exploitation allows an attacker to achieve arbitrary code execution within the context of the browser process. This could lead to full system compromise, data exfiltration, or unauthorized access to sensitive user information, justifying the high CVSS score of 8.8.

Immediate Action: Update Google Chrome to the latest stable release provided by the vendor to patch the ANGLE component.

Proactive Monitoring: Monitor endpoint logs for abnormal browser process behavior or unexpected crashes that may indicate exploitation attempts.

Compensating Controls: Ensure that browser-based security policies, such as site isolation and sandboxing, are strictly enforced, and utilize endpoint detection and response (EDR) tools to identify malicious process activity.

Public Exploit Available: Unknown.

Given the severity of this vulnerability and the potential for remote code execution, it is imperative that all Google Chrome installations are updated immediately. Organizations should prioritize patching this as part of their standard security maintenance cycle to minimize the window of exposure.