Chrome 150 patches critical memory-safety bugs

Google released Chrome 150 with fixes for seven memory-safety vulnerabilities. The update addresses three critical use-after-free bugs in the CameraCapture, GPU and Network components that were found by Google, three high-severity use-after-free flaws in Cast, Ozone and Aura also discovered by Google, and an out-of-bounds read and write in the V8 JavaScript engine reported by OpenAI Codex Security.

Memory-safety errors such as use-after-free and out-of-bounds access can allow attackers to crash a program, corrupt data or run code if they are exploited. Google’s release notes do not report any evidence that these specific flaws were exploited in the wild. Google has not announced a bug bounty amount for the V8 submission.

The update is rolling out now. Windows and macOS users should receive versions 150.0.7871.128 and 150.0.7871.129, while Linux builds are being updated to 150.0.7871.128. Google recommends installing the update as soon as it appears for a user’s platform.

Since April, Google has patched more than 1,400 Chrome vulnerabilities, including hundreds involving memory safety. The company has shifted parts of the browser code to memory-safe languages such as Rust and has said some fixes were found using advanced techniques, including AI-assisted methods.

The V8 engine executes JavaScript across web pages and applications, so flaws in V8 can affect many sites. Users should check Chrome’s update settings or allow automatic updates to ensure they receive the patched versions.