Google Chrome on Windows versions prior to 148.0.7778.216 contain an out-of-bounds read vulnerability in the ANGLE library, necessitating an immediate security update.

This is an out-of-bounds read (CWE-125) flaw within the ANGLE graphics component. It is a non-authenticated vulnerability requiring user interaction through a malicious web page.

This vulnerability could allow an attacker to read sensitive memory or potentially lead to further exploitation within the browser environment. With a CVSS score of 8.8, the vulnerability is highly significant, as it could be combined with other flaws to compromise the host system on Windows platforms.

Immediate Action: Update Google Chrome on all Windows systems to version 148.0.7778.216 or later.

Proactive Monitoring: Monitor for unusual graphics-related crashes or errors in browser logs that may indicate attempts to trigger memory read vulnerabilities.

Compensating Controls: Ensure that Windows-level security features, such as Hardware-enforced Stack Protection and DEP, are enabled to provide defense-in-depth against memory-based attacks.

Public Exploit Available: No

Given the potential for this graphics-related vulnerability to facilitate further exploitation, immediate patching is required. Security teams should verify that all Windows endpoints running Chrome have been updated to the latest stable version to mitigate this risk.