A Vulnerability in Google Chrome Could Allow for Arbitrary Code Execution

A Google Chrome vulnerability (CVE-2025-8292) — a use-after-free in the Media Stream component — is reported that could allow arbitrary code execution through a drive-by compromise (T1189). Successful exploitation could let an attacker execute code as the logged-on user, potentially installing programs, modifying or deleting data, or creating accounts; impact depends on the victim's privileges.