Vendor
Vulnerabilities, supply-chain compromises, and abuse of Google's platforms — Chrome and V8, Android, the Chrome Web Store as a malware distribution channel, and Workspace as an attacker pivot point in identity-driven intrusions.
CVEs
[ HIGH ] CVSS 7.5 patched
Chrome Ozone use-after-free on Linux
Use-after-free in the Ozone platform-abstraction layer on Chrome for Linux. A remote attacker who convinces a user to perform specific UI gestures could exploit heap corruption via a crafted HTML page. Fixed in Chrome 150.0.7871.125.
Google / Chrome for Linux (pre-150.0.7871.125)
[ HIGH ] CVSS 7.5 patched
Chrome Ozone use-after-free
Use-after-free in Chrome's Ozone platform-abstraction layer. A remote attacker who convinces a user to perform specific UI gestures could exploit heap corruption via a crafted HTML page. Fixed in Chrome 150.0.7871.125.
Google / Chrome (pre-150.0.7871.125)
