CVE-2026-15764

chromium-browser: chromium-browser: Use after free in Ozone

Published Jul 14, 2026 CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed

Description

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

Analysis

Technical impact

A use-after-free vulnerability occurring in the Ozone component of Google Chrome on Linux can corrupt the heap when a user performs specific UI gestures in response to a crafted HTML page. This flaw, classified as CWE-416 and involving improper handling of dynamic data (CWE-825), enables a remote attacker who convinces a user to engage in those gestures to potentially exploit heap corruption, which could lead to serious compromise of the affected system but does not necessarily imply execution of arbitrary code.

Affected Systems

Google Chrome running on Linux systems with a version earlier than 150.0.7871.125 is affected. No other platforms or products are listed as impacted.

Risk and Exploitability

The vulnerability has a CVSS score of 7.5 and an EPSS score of less than 1%, indicating a high severity but a currently low probability of exploitation. It is not listed in the CISA KEV catalog. To exploit the flaw, a remote attacker must convince a user to perform certain UI gestures after loading a malicious HTML page, which is inferred from the description of the required user actions.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Google

Chrome

affected

Version	Status	Constraints
`150.0.7871.125`	affected	< 150.0.7871.125

Configuration 1 [-]

AND

cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

No data.

Vendor Product Versions

Google

Chrome

Version	Status	Scheme	Platform
`[150.0.7871.125,150.0.7871.125)`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade Google Chrome to version 150.0.7871.125 or later, as specified in the stable channel release notes.
Ensure proper validation and sanitization of all dynamic data before use to mitigate data corruption issues (CWE-825).
Avoid opening or interacting with untrusted HTML content that could trigger the bug until an update is installed.
Use Chrome’s native update mechanism or your operating‑system’s package manager to keep the browser current and reduce exposure to similar vulnerabilities.

Generated by OpenCVE AI on August 5, 2026 at 02:31 UTC.

Tracking

Advisories

Source	ID	Title
Debian DLA	DLA-4687-1	chromium security update
Debian DSA	DSA-6390-1	chromium security update

Metrics

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.304% probability within 30 days)

Exploitation none

Automatable no

Technical Impact total

References

Link	Providers
https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html
https://issues.chromium.org/issues/517100492
https://nvd.nist.gov/vuln/detail/CVE-2026-15764
https://www.cve.org/CVERecord?id=CVE-2026-15764

History

Jul 29, 2026 12:15 AM Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Title	Use‑After‑Free in Chrome’s Ozone Enables Heap Corruption	chromium-browser: chromium-browser: Use after free in Ozone
Weaknesses		CWE-825
References		https://nvd.nist.gov/vuln/detail/CVE-2026-15764 https://www.cve.org/CVERecord?id=CVE-2026-15764
Metrics	threat_severity `None`	threat_severity `Critical`

Jul 28, 2026 4:45 AM Title updated View changes

Type	Values Removed	Values Added
Title		Use‑After‑Free in Chrome’s Ozone Enables Heap Corruption

Jul 26, 2026 11:00 AM Title updated View changes

Type	Values Removed	Values Added
Title	Use-After-Free in Chrome Ozone Causing Heap Corruption on Linux

Jul 22, 2026 8:45 AM Title updated View changes

Type	Values Removed	Values Added
Title		Use-After-Free in Chrome Ozone Causing Heap Corruption on Linux

Jul 17, 2026 5:30 PM Title updated View changes

Type	Values Removed	Values Added
Title	Use‑After‑Free in Ozone Leading to Heap Corruption and Remote Code Execution in Google Chrome on Linux

Jul 16, 2026 2:15 AM Title updated View changes

Type	Values Removed	Values Added
Title		Use‑After‑Free in Ozone Leading to Heap Corruption and Remote Code Execution in Google Chrome on Linux

Jul 15, 2026 12:00 PM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Google Google chrome
Vendors & Products		Google Google chrome

Jul 14, 2026 9:30 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Jul 14, 2026 8:30 PM Description updated. Weaknesses updated. Added references View changes

Type	Values Removed	Values Added
Description		Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Weaknesses		CWE-416
References		https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html https://issues.chromium.org/issues/517100492