The Chrome 150 security update patches seven memory safety vulnerabilities: three critical use-after-free flaws in CameraCapture, GPU, and Network components; three high-severity use-after-free issues in Cast, Ozone, and Aura components; and one out-of-bounds read/write vulnerability in the V8 JavaScript engine. All vulnerabilities were discovered by Google except the V8 flaw, identified by OpenAI Codex Security. These bugs could potentially lead to memory corruption. Google has not reported any active exploitation. The update is rolling out as Chrome 150.0.7871.128/.129 for Windows and macOS and 150.0.7871.128 for Linux.

The vulnerabilities are memory safety bugs that could allow attackers to exploit use-after-free conditions or out-of-bounds memory access, potentially leading to arbitrary code execution or browser compromise. However, there are no known exploits in the wild at this time. The affected components are critical browser subsystems, increasing the importance of timely patching.

A security update for Chrome 150 is available and should be applied immediately. Users should update to versions 150.0.7871.128/.129 on Windows and macOS, and 150.0.7871.128 on Linux to mitigate these vulnerabilities. No additional mitigation steps are indicated by the vendor.