An attacker positioned on a privileged network can send crafted certificate data that Chrome on Linux incorrectly accepts, allowing the forging of domain names used in HTTPS connections. The flaw arises from inadequate input validation in certificate handling code, which can lead to session hijacking or credential theft when the browser mistreats forged certificates as legitimate. This vulnerability directly impacts confidentiality and integrity of encrypted communications in Chrome on Linux.

All installations of Google Chrome on Linux before version 150.0.7871.182 are vulnerable. Different operating systems or other browsers are not affected.

The CVSS score of 7.5 signifies high potential impact, while the EPSS score of less than 1% suggests a low current risk of exploitation. The flaw is not listed in CISA’s KEV catalog. Exploitation requires the attacker to control or influence network traffic to deliver forged certificates, typically through a high‑privilege or compromised position within the network. Because the vulnerability resides in certificate validation, it is neutralized if Chrome’s default settings are enabled and no insecure custom CAs or overrides are present.