Chrome 150 Update Fixes Seven Memory-Safety Vulnerabilities

Summary

Google’s Chrome 150 update fixes seven memory-safety bugs, including three critical and three high-severity use-after-free flaws. No in-the-wild exploitation was reported; updates are rolling out across Windows, macOS and Linux.

Key points

The update fixes three critical use-after-free vulnerabilities in CameraCapture, GPU and Network, all discovered by Google.
Three high-severity use-after-free flaws in Cast, Ozone and Aura were also discovered by Google.
The seventh bug is an out-of-bounds read and write in V8, identified by OpenAI Codex Security.
Google did not report exploitation of these vulnerabilities in the wild.
Chrome 150.0.7871.128/.129 is rolling out for Windows and macOS; version 150.0.7871.128 is rolling out for Linux.

Article Details

Vulnerability Types: Use-after-free
Out-of-bounds read and write
Severity: Critical and high
Exploitation Status: not_reported
Exploit Availability: unknown
Patch Status: available

Vendors

GoogleGoogle has released a Chrome 150 security update that resolves seven memory safety bugs, including critical and high-severity use-after-free vulnerabilities.

Products

Google ChromeGoogle has released a Chrome 150 security update that resolves seven memory safety bugs, including critical and high-severity use-after-free vulnerabilities.V8The seventh security defect is an out-of-bounds read and write flaw in the V8 JavaScript engine that was identified by OpenAI Codex Security.

Tools

OpenAI Codex SecurityThe seventh security defect is an out-of-bounds read and write flaw in the V8 JavaScript engine that was identified by OpenAI Codex Security.