Use-after-free in Skia in Google Chrome

Successful exploitation can enable a sandbox escape from the compromised renderer process, allowing attacker-controlled execution or actions outside the renderer sandbox. This can significantly expand post-compromise capability within the browser context and may enable broader compromise of confidentiality, integrity, and availability on the affected system, depending on subsequent exploitation and the privileges available to the browser process.

Apply the vendor security update without delay. Until patching is complete, reduce exposure by enforcing least privilege for browser users, limiting access to untrusted or high-risk web content, restricting unnecessary extensions and downloads, and enabling available exploit-mitigation and browser hardening controls. Because exploitation requires renderer compromise, reducing exposure to malicious web content and promptly patching related browser vulnerabilities is particularly important.

Upgrade Google Chrome to version 150.0.7871.125 or later. For Chromium-based downstream distributions, apply the vendor-provided fixed build that incorporates the upstream Chrome 150 security fixes. Debian stable users should upgrade chromium to the fixed package version provided by the distribution.