In versions of Google Chrome for macOS released before build 150.0.7871.47, an unchecked memory guard in the WebUSB component permits a local attacker to perform a use‑after‑free and execute arbitrary code with the privileges of the logged‑in user. The browser prematurely frees a buffer during a WebUSB transaction and an attacker can then supply crafted data that is processed after the free, leading to arbitrary code execution.

The vulnerability affects Google Chrome running on macOS. Any installation of Chrome with an undefined build prior to 150.0.7871.47 is listed as vulnerable; other operating systems or vendors are not referenced by the CNA for this CVE.

Chromium assigns the flaw a critical severity. No EPSS score is currently available and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires a malicious USB peripheral that can communicate via the WebUSB API, implying a local attack vector. Because the flaw is triggered by a local physical or logical USB connection, the risk is primarily local, but an attacker could gain full code execution on the affected device.