A use‑after‑free flaw exists in the Ozone layer of Google Chrome on Linux prior to version 149.0.7827.103. A crafted HTML page can trigger lingering references to freed heap memory, leading to heap corruption that may culminate in arbitrary code execution or privilege escalation. This weakness is classified as CWE‑416 and CWE‑825 and has a high severity rating within Chromium’s security assessment.

The vulnerability affects Google Chrome for Linux desktop builds that use the Ozone backend. Only installations earlier than 149.0.7827.103 are impacted; later releases contain the patch and are not affected.

Exploitability is evaluated by the EPSS score of less than 1%, indicating a low probability of widespread exploitation at the time of analysis, yet the high CVSS score of 8.8 reflects the potential for severe damage if successful. The vulnerability remains unlisted in the CISA KEV catalog, which suggests no public exploits have been confirmed to date. Nonetheless, a remote attacker generating a malicious webpage could trigger heap corruption, potentially bypassing browser sandboxing and leading to arbitrary code execution while the user is logged in.