Type Confusion in V8 in Google Chrome

Successful exploitation allows remote arbitrary code execution in the context of the Chrome renderer inside the browser sandbox. This can enable compromise of the affected renderer process, execution of attacker-controlled logic within sandbox constraints, and potentially serve as a stepping stone for further browser exploitation when combined with a sandbox-escape or privilege-escalation vulnerability. It may also result in browser instability or crashes.

Until patched versions can be deployed, reduce exposure by limiting use of untrusted web content, restricting browser access to attacker-controlled sites, and applying enterprise browser hardening controls where available. Because exploitation requires rendering crafted web content, isolating high-risk browsing activity and disabling unnecessary active content pathways may reduce risk, but updating to a fixed version is the effective mitigation.

Upgrade Google Chrome to version 151.0.7922.169 or later. For Debian systems using the chromium package, apply the vendor-provided security update that includes the fixed Chromium build. Ensure downstream Chromium-based browsers receive the corresponding patched release from their vendors.