A use‑after‑free flaw exists in the Ozone layer of Google Chrome on Linux prior to version 149.0.7827.103. A crafted HTML page can trigger lingering references to freed heap memory, leading to heap corruption that may culminate in arbitrary code execution or privilege escalation. This weakness is classified as CWE‑416 and has a high severity rating within Chromium’s security assessment.

The vulnerability affects Google Chrome for Linux desktop builds that use the Ozone backend. Only installations earlier than 149.0.7827.103 are impacted; later releases contain the patch and are not affected.

Exploitability is not quantified by an EPSS score, but the absence of a score does not lower the potential threat. The flaw has a CVSS score of 8.8 and is not listed in CISA KEV, yet the attack vector is a remote attacker generating a malicious webpage that a user visits. Successful exploitation would corrupt the browser’s heap, potentially bypassing sandbox protections and allowing execution of attacker-supplied code while the user is logged in.