Integer Overflow in Blink in Google Chrome

Successful exploitation can cause heap corruption in the browser process. Given the vulnerability class and the affected attack surface (Blink processing attacker-controlled HTML), this creates a credible path to severe memory corruption outcomes, potentially including browser crash and arbitrary code execution in the context of the targeted process. The provided content specifically confirms heap memory corruption and rates the issue Critical, but does not explicitly confirm in-the-wild exploitation.

If immediate patching is not possible, reduce exposure to untrusted web content and restrict browsing to trusted sites until updates can be deployed. Enterprise defenders should prioritize rapid browser updates, monitor for corresponding fixes in Chromium-based browsers, and consider temporary controls that limit access to attacker-controlled HTML content. No specific vendor mitigation beyond updating was provided in the content.

Update Google Chrome to version 148.0.7778.96 or later on affected platforms. The provided content indicates that Chrome 148 contains the fix, with desktop releases including 148.0.7778.96 for Linux and 148.0.7778.96/.97 for Windows and macOS. Because the issue affects Chromium, corresponding updates should also be applied to Chromium-derived browsers once available.