Use-After-Free vulnerability in the Views component of Google Chrome
A vulnerability affecting Google Chrome would allow an unauthenticated attacker to cause memory corruption and potentially execute arbitrary code on affected systems.
Description
Technical context and vulnerability details
Views is a library used by Chrome developers to create and manage user interface elements. Google Chrome is a web browser developed by Google. This product is affected by a vulnerability labeled CVE-2026-15129 resulting from improper Use-After-Free memory management within the Views component. Exploitation of this vulnerability would allow an unauthenticated attacker to trick a victim into viewing a specially crafted HTML page in order to cause memory corruption and potentially execute arbitrary code. It is classified high with a severity score of 8.8 according to CVSS V3.1
Potential Risks & Impact
Potential consequences upon exploitation
- Remote Arbitrary Code Execution;
- Compromise of system integrity;
- Data privacy breach;
- Memory corruption;
Affected systems
Products, components and targeted versions
- Google chrome version earlier than version 150.0.7871.115;
Recommended Remediations & Actions
Immediate actions and recommended mitigations
- Update Google Chrome to the latest available version;
- Enable Google Chrome automatic updates;
- Apply browser security policies;
Sources & External Links
Vendor security advisories and documentation
Advisory Specifications
CSIRT Emergency Response
Is your organization affected or do you suspect an incident? Our security experts are available to assist.
Report an incidentGet our alerts by email
Subscribe to receive our security alert bulletins and Iservices news straight to your inbox.