EXECUTIVE SUMMARY
Google has released a new Chrome Stable security update addressing 27 vulnerabilities, including two Critical vulnerabilities that could potentially allow Remote Code Execution (RCE) on affected systems.
The most severe vulnerabilities, CVE-2026-15112 and CVE-2026-15129, are use-after-free (UAF) flaws affecting Chrome’s Ozone platform abstraction layer and Views UI framework, respectively. Successful exploitation could allow a remote attacker to execute arbitrary code by convincing a user to visit a specially crafted malicious webpage.
In addition to the Critical vulnerabilities, Google has addressed multiple High-severity vulnerabilities affecting several Chrome components, including Autofill, WebRTC, Core, Input, Payments, Forms, the V8 JavaScript engine, ANGLE, WebAppInstalls, Codecs, Extensions API, Password Manager, navigation handling, and DOM validation. These vulnerabilities include memory corruption, use-after-free, integer overflow, insufficient input validation, and logic enforcement issues that could be exploited to compromise browser security or facilitate further attacks.
- Release: Google Chrome Stable Security Update
- Active Region: Global
- Affected Sector: All sectors using Google Chrome across enterprise and consumer environments
- Affected Product: Google Chrome Stable (Windows, macOS, Linux)
- Affected Version: Prior to 150.0.7871.114/.115 (Windows/macOS) and 150.0.7871.114 (Linux)
- Severity: Critical
- Published Date: July 09, 2026
CVE LIST
……
