CVE-2026-15765Patch(google / chrome)

LOWCVSS 7.5 · HIGH

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch google chrome systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

google CVEs Back to dashboard

2.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0353146366.html

Other references

https://issues.chromium.org/issues/518007484

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

chrome

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
6 mentions across 5 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Patch or workaround mentioned in 5 signals
Technical details provided in 5 signals
Disclosure: 1 classified signal
Peaked 4d ago at 2 mentions (2026-07-15); latest day: 1
6 total mentions across 5 days

Affected systems

Vendors

google

Products

chrome

Deep dive

Activity timeline6 mentions / 5d

Signal classification2 categories

Patch

583.3%

Disclosure

116.7%

Referenced assets5 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-15	2	Patch2
2026-07-16	1	Patch1
2026-07-22	1	Patch1
2026-08-09	1	Patch1
2026-08-18	1	Disclosure1

Full discourse6 posts

iototsecnews@iototsecnews84d
Patch
Google Chrome 150 がリリース：Critical 脆弱性 2 件を含む 15 件の脆弱性に対応 https://iototsecnews.jp/2026/07/15/google-chrome-150-update-fixes-15-security-vulnerabilities-including-2-critical-use-after-free-flaws/ 今回の Chrome のアップデートでは、多くの深刻な脆弱性が修正されました。主な原因はメモリ管理の不備にあります。特に重大な CVE-2026-15764 や CVE-2026-15765 などの脆弱性は、すでに解放されたメモリ領域にプログラムがアクセスしてしまう "解放済みメモリの使用" という問題に起因します。また、CVE-2026-15776 は、データの型を誤って処理してしまう "タイプ・コンフュージョン" に起因し、メモリ破損を引き起こす恐れがあります。ご利用のチームは、ご注意ください。 #Chrome #CVE202615764 #CVE202615765 #Google #Vulnerability
Post summary
Google Chrome 150 was released with patches for 15 security issues, including two critical CVEs involving use‑after‑free bugs and type‑confusion that could cause memory corruption. No exploits or PoCs were disclosed.
01000128
500 followersView on X
セキュリティ対策Lab@securityLab_jp89d
Patch
Google Chrome、Ozoneの2件のCritical脆弱性を含む15件を修正-7月8日更新からわずか6日で追加パッチ(CVE-2026-15764、CVE-2026-15765) https://rocket-boys.co.jp/security-measures-lab/chrome-ozone-critical-patch-july-2026/ #セキュリティ対策Lab #security #securitynews
Post summary
The article announces that Google Chrome received 15 vulnerability patches, including two critical CVEs (CVE‑2026‑15764, CVE‑2026‑15765), with updates released six days after the July 8th release, but it provides no details on PoCs, exploits, or active attacks.
00010160
483 followersView on X
IntegSec@integ_sec56d
Disclosure
CVE-2026-15765: Google Chrome Ozone Use-After-Free - What It Means for Your Business and How to Respond https://hubs.li/Q04tsr2m0
Post summary
The article announces CVE‑2026‑15765, a Google Chrome Ozone use‑after‑free vulnerability, but provides only high‑level business guidance without details on exploitation, patches, or PoC.
0000030
32 followersView on X
kawn@kawn202066d
Patch
#securityupdate #chromeos Google が LTS-144 バージョンとして ChromeOS 144.0.7559.258 (Platform Version: 16503.91.0) をリリース． CVE ベースで Critical 4 件・CVE-2026-8513 ・CVE-2026-10888 ・CVE-2026-15129 ・CVE-2026-15765 High 23 件，Medium 1 件に対処. https://x.com/kawn2020/status/2086284993714926054
Post summary
Google released ChromeOS 144, patching four critical CVEs along with additional high and medium severity fixes.
0000059
90 followersView on X
Offensive Lab@OffensiveLab90d
Patch
Mozilla has released updates to address two critical flaws in #Firefox for which it warned that exploit code has been published. The vulnerabilities are listed below - CVE-2026-15718, an invalid pointer in the JavaScript: WebAssembly component CVE-2026-15719, a site isolation in the DOM: Navigation component "We are aware that exploit code for this is public, however we are not aware of any attacks in the wild abusing this flaw," Mozilla said in an advisory. Both vulnerabilities have been addressed in Firefox version 152.0.6. The release comes as Google shipped fixes for 15 security flaws, including two critical use-after-free bugs in Ozone (CVE-2026-15764 and CVE-2026-15765), a cross-platform abstraction layer that allows the browser to interact natively with various display servers and windowing systems. It supports Linux, ChromeOS, and Fuchsia.
Post summary
Mozilla released Firefox 152.0.6 to patch two critical CVEs for which exploit code is publicly available, though no wild attacks have been reported.
00000136
112 followersView on X
Daily CyberSecurity@Daily_CyberSec91d
Patch
Google's Chrome security update 150.0.7871.124 fixes 15 flaws, including critical use-after-free bugs CVE-2026-15764 and CVE-2026-15765. Update now. #Chrome #GoogleChrome #CVE #BrowserSecurity #CyberSecurity http://securityonline.info/chrome-150-security-update/
Post summary
The announcement informs users that Chrome version 150.0.7871.124 includes a security update that patches 15 flaws, notably critical use‑after‑free bugs CVE-2026-15764 and CVE-2026-15765, and urges immediate updates.
00000340
12.5K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	google	chrome	-	-	-

Explore more

Back to dashboard google CVEs chrome vulnerabilities

What researchers are saying

CVE-2026-15765

セキュリティ対策Lab[verified]@securityLab_jpPatch

The article announces that Google Chrome received 15 vulnerability patches, including two critical CVEs (CVE‑2026‑15764, CVE‑2026‑15765), with updates released six days after the July 8th release, but it provides no details on PoCs, exploits, or active attacks.

IntegSec[verified]@integ_secDisclosure

The article announces CVE‑2026‑15765, a Google Chrome Ozone use‑after‑free vulnerability, but provides only high‑level business guidance without details on exploitation, patches, or PoC.

Offensive Lab[verified]@OffensiveLabPatch

Mozilla released Firefox 152.0.6 to patch two critical CVEs for which exploit code is publicly available, though no wild attacks have been reported.

iototsecnews@iototsecnewsPatch

Google Chrome 150 was released with patches for 15 security issues, including two critical CVEs involving use‑after‑free bugs and type‑confusion that could cause memory corruption. No exploits or PoCs were disclosed.

kawn@kawn2020Patch

Google released ChromeOS 144, patching four critical CVEs along with additional high and medium severity fixes.

Daily CyberSecurity@Daily_CyberSecPatch

The announcement informs users that Chrome version 150.0.7871.124 includes a security update that patches 15 flaws, notably critical use‑after‑free bugs CVE-2026-15764 and CVE-2026-15765, and urges immediate updates.