Use-after-free in Ozone in Google Chrome on Linux

Successful exploitation can cause heap corruption and may enable arbitrary code execution in the context of the logged-on user. Depending on the privileges of that user, an attacker could potentially execute code, access or modify data available to the browser session, bypass security restrictions, or cause a denial of service through browser instability or crash. Impact is greater where Chrome is used under elevated or administrative privileges.

If immediate patching is not possible, reduce exposure by limiting use of affected Chrome on Linux systems for untrusted browsing, restricting access to suspicious or untrusted websites, enforcing least privilege so users do not browse with administrative rights, and using browser hardening controls such as sandboxing, exploit protection, URL filtering, and extension restrictions. Users should avoid interacting with suspicious pages that prompt unusual UI gestures until the update is applied.

Upgrade Google Chrome on Linux to version 150.0.7871.125 or later. For Chromium distributions, apply the vendor-provided fixed package version where available. Organizations should prioritize deployment because the vulnerability is rated critical and affects a core browser platform integration component.