CVE-2026-15764Patch(google / chrome)

LOWCVSS 7.5 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch google chrome systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

google CVEs Back to dashboard

2.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html

Other references

https://issues.chromium.org/issues/517100492

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

chrome
linux_kernel

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
6 mentions across 4 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 5 signals
Technical details provided in 5 signals
Disclosure: 1 classified signal
Peaked 3d ago at 3 mentions (2026-07-15); latest day: 1
6 total mentions across 4 days

Affected systems

Vendors

google linux

Products

chromelinux_kernel

1 version affected across 2 products

Deep dive

Activity timeline6 mentions / 4d

Signal classification2 categories

Patch

583.3%

Disclosure

116.7%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-15	3	Patch3
2026-07-16	1	Patch1
2026-07-22	1	Patch1
2026-08-18	1	Disclosure1

Full discourse6 posts

iototsecnews@iototsecnews84d
Patch
Google Chrome 150 がリリース：Critical 脆弱性 2 件を含む 15 件の脆弱性に対応 https://iototsecnews.jp/2026/07/15/google-chrome-150-update-fixes-15-security-vulnerabilities-including-2-critical-use-after-free-flaws/ 今回の Chrome のアップデートでは、多くの深刻な脆弱性が修正されました。主な原因はメモリ管理の不備にあります。特に重大な CVE-2026-15764 や CVE-2026-15765 などの脆弱性は、すでに解放されたメモリ領域にプログラムがアクセスしてしまう "解放済みメモリの使用" という問題に起因します。また、CVE-2026-15776 は、データの型を誤って処理してしまう "タイプ・コンフュージョン" に起因し、メモリ破損を引き起こす恐れがあります。ご利用のチームは、ご注意ください。 #Chrome #CVE202615764 #CVE202615765 #Google #Vulnerability
Post summary
Google Chrome 150 update addresses 15 vulnerabilities, including two critical use‑after‑free flaws that arise from improper memory management, signifying a robust patch effort.
01000128
500 followersView on X
セキュリティ対策Lab@securityLab_jp89d
Patch
Google Chrome、Ozoneの2件のCritical脆弱性を含む15件を修正-7月8日更新からわずか6日で追加パッチ(CVE-2026-15764、CVE-2026-15765) https://rocket-boys.co.jp/security-measures-lab/chrome-ozone-critical-patch-july-2026/ #セキュリティ対策Lab #security #securitynews
Post summary
The post announces that Google Chrome and Ozone have been patched for 15 vulnerabilities, including CVE-2026-15764 and CVE-2026-15765, with the update released six days after the July 8 release.
00010160
483 followersView on X
IntegSec@integ_sec56d
Disclosure
CVE-2026-15764: Google Chrome Use-After-Free Vulnerability - What It Means for Your Business and How to Respond https://hubs.li/Q04tp_WR0
Post summary
The text announces CVE‑2026‑15764, a Google Chrome use‑after‑free vulnerability, without providing additional technical, exploit, or mitigation details.
0000033
32 followersView on X
Offensive Lab@OffensiveLab90d
Patch
Mozilla has released updates to address two critical flaws in #Firefox for which it warned that exploit code has been published. The vulnerabilities are listed below - CVE-2026-15718, an invalid pointer in the JavaScript: WebAssembly component CVE-2026-15719, a site isolation in the DOM: Navigation component "We are aware that exploit code for this is public, however we are not aware of any attacks in the wild abusing this flaw," Mozilla said in an advisory. Both vulnerabilities have been addressed in Firefox version 152.0.6. The release comes as Google shipped fixes for 15 security flaws, including two critical use-after-free bugs in Ozone (CVE-2026-15764 and CVE-2026-15765), a cross-platform abstraction layer that allows the browser to interact natively with various display servers and windowing systems. It supports Linux, ChromeOS, and Fuchsia.
Post summary
Mozilla released Firefox update 152.0.6 to fix CVE‑2026‑15718 and CVE‑2026‑15719, with public exploit code available but no known in‑the‑wild attacks.
00000136
112 followersView on X
TECHEPAGES@techepages91d
Patch
🚨 Google just patched 15 security flaws in Chrome, including two critical use-after-free bugs in the Ozone graphics layer. Update to version 150.0.7871.124/.125 now — delaying leaves you exposed to memory corruption exploits. 🔹 CVE-2026-15764 & 15765: critical Ozone UAF flaws that could enable RCE or sandbox escape 🔹 12 high-severity bugs fixed across V8, Skia, GPU, media & UI components 🔹 V8 JavaScript engine alone accounts for 3 high-severity fixes 🔹 Check Settings > About Chrome, then restart to apply the patch
Post summary
Google released a patch for 15 Chrome security flaws, including critical use‑after‑free bugs that could enable RCE or sandbox escape, and users are urged to update to version 150.0.7871.124/.125.
0000076
23 followersView on X
Daily CyberSecurity@Daily_CyberSec91d
Patch
Google's Chrome security update 150.0.7871.124 fixes 15 flaws, including critical use-after-free bugs CVE-2026-15764 and CVE-2026-15765. Update now. #Chrome #GoogleChrome #CVE #BrowserSecurity #CyberSecurity http://securityonline.info/chrome-150-security-update/
Post summary
Google released Chrome update 150.0.7871.124 fixing 15 flaws, including the critical use‑after‑free CVE-2026‑15764 and CVE‑2026‑15765, providing an official patch for users.
00000340
12.5K followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	google	chrome	-	-	-
OS	linux	linux_kernel	-	-	-

Explore more

Back to dashboard google CVEs linux CVEs chrome vulnerabilities

What researchers are saying

CVE-2026-15764

セキュリティ対策Lab[verified]@securityLab_jpPatch

The post announces that Google Chrome and Ozone have been patched for 15 vulnerabilities, including CVE-2026-15764 and CVE-2026-15765, with the update released six days after the July 8 release.

IntegSec[verified]@integ_secDisclosure

The text announces CVE‑2026‑15764, a Google Chrome use‑after‑free vulnerability, without providing additional technical, exploit, or mitigation details.

Offensive Lab[verified]@OffensiveLabPatch

Mozilla released Firefox update 152.0.6 to fix CVE‑2026‑15718 and CVE‑2026‑15719, with public exploit code available but no known in‑the‑wild attacks.

TECHEPAGES[verified]@techepagesPatch

Google released a patch for 15 Chrome security flaws, including critical use‑after‑free bugs that could enable RCE or sandbox escape, and users are urged to update to version 150.0.7871.124/.125.

iototsecnews@iototsecnewsPatch

Google Chrome 150 update addresses 15 vulnerabilities, including two critical use‑after‑free flaws that arise from improper memory management, signifying a robust patch effort.

Daily CyberSecurity@Daily_CyberSecPatch

Google released Chrome update 150.0.7871.124 fixing 15 flaws, including the critical use‑after‑free CVE-2026‑15764 and CVE‑2026‑15765, providing an official patch for users.