Description
Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Published: 2026-07-14
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

This vulnerability is a use‑after‑free flaw in the Ozone backend of Google Chrome that can be triggered by a crafted HTML page, provided the user performs specific UI gestures. The flaw can corrupt heap objects and may allow the attacker to execute arbitrary code on the victim’s system. The weakness is identified as CWE‑416 and CWE‑825, and is rated as Critical by Chromium security. The potential impact is the loss of confidentiality, integrity and availability of the user’s data and the system itself.

Affected Systems

All instances of Google Chrome built before version 150.0.7871.125 are affected, regardless of operating system. The flaw has been reported for the desktop stable channel and applies to all regular user builds. Users should verify that their Chrome version is at least 150.0.7871.125 to ensure the vulnerability is fixed.

Risk and Exploitability

The CVSS score of 7.5 categorises this flaw as high severity, and the EPSS score of less than 1% indicates a very low likelihood of exploitation in the wild. The vulnerability is not listed in CISA’s KEV to open a malicious HTML page and perform the required UI gestures, making it a remote, user‑interaction–dependent exploit. If successful, the heap corruption could lead to arbitrary code execution.

Generated by OpenCVE AI on August 3, 2026 at 03:13 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Chrome to version 150.0.7871.125 or later, which includes the Ozone use‑ updates so that users receive future security patches promptly.
  • If the update cannot be applied immediately, restrict delivery of untrusted HTML content through network filtering or a browser white‑list to mitigate the risk of a malicious page exploiting the flaw.
  • Verify that Chrome is launched with sandboxing enabled and is not started with the --no-sandbox flag, to reduce the impact of potential heap corruption.

Generated by OpenCVE AI on August 3, 2026 at 03:13 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4687-1 chromium security update
Debian DSA Debian DSA DSA-6390-1 chromium security update
History

Wed, 29 Jul 2026 00:15:00 +0000

Type Values Removed Values Added
Title chromium-browser: chromium-browser: Use after free in Ozone
Weaknesses CWE-825
References
Metrics threat_severity

None

 threat_severity

Critical

Tue, 28 Jul 2026 04:45:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Ozone Enables Heap Corruption via Crafted HTML

Wed, 22 Jul 2026 08:45:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Ozone Enables Heap Corruption via Crafted HTML

Mon, 20 Jul 2026 21:30:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chromium Ozone Enabling Heap Corruption via Crafted HTML

Thu, 16 Jul 2026 02:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chromium Ozone Enabling Heap Corruption via Crafted HTML

Wed, 15 Jul 2026 12:00:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Tue, 14 Jul 2026 21:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 14 Jul 2026 20:30:00 +0000

Type Values Removed Values Added
Description Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
Weaknesses CWE-416
References

Subscriptions

Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-07-15T04:01:02.696Z

Reserved: 2026-07-14T18:31:14.551Z

Link: CVE-2026-15765

cve-icon Vulnrichment

Updated: 2026-07-14T20:42:20.276Z

cve-icon NVD

No data.

cve-icon Redhat

Severity : Critical

Publid Date: 2026-07-14T20:09:50Z

Links: CVE-2026-15765 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-03T03:15:05Z

Weaknesses