Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a cr…

High CVSS 7.5

CVECVE-2026-15777

First seen2026-07-29 20:30 UTC

Disclosed2026-07-14 21:16 UTC

Last updated2026-07-29 20:30 UTC

Channel statusauto

Summary

Use after free in UI in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

In-depth triage · Auto channel

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html Release Notes
https://issues.chromium.org/issues/532929679 Permissions Required

Timeline

2026-07-29 nvd_ingest NVD