GOOGLE has released a Chrome 150 security update that addresses 27 vulnerabilities, including two critical use‑after‑free flaws affecting the browser on Windows, macOS and Linux. Users are urged to apply the patches immediately to protect against potential exploitation. The update is detailed in the official Chrome release blog here.
The patches bring Chrome to version 150.0.7871.114/.115 for Windows and macOS, and 150.0.7871.114 for Linux. Thirteen of the resolved issues are use‑after‑free defects, with the two most severe located in the Ozone and Views components that handle rendering and window management. No CVE identifiers have been assigned yet, as the flaws were reported internally.
These memory management errors could allow attackers to execute arbitrary code without any interaction from the victim if a malicious web page is loaded. Google notes that the majority of the vulnerabilities in this release were uncovered by its own internal teams, with only three findings coming from external researchers who received modest bug bounty awards.
Since April Google has patched more than 1,400 Chrome flaws, highlighting a steady stream of internal discovery. Although no active exploitation of these specific bugs has been reported in the wild, the sheer size of Chrome’s user base makes prompt updating a priority for defenders.
Individual users should open Chrome, select Help then About Google Chrome to trigger an automatic update and verify that the version number reads 150.0.7871.114 or higher. If the automatic check fails, the latest installer can be downloaded directly from the official Chrome website.
Enterprise administrators can enforce the update through existing endpoint management policies, test the new build in a staging group before full rollout, and ensure that browsers are restarted to complete the patch process. Monitoring endpoint logs for unexpected crashes or unusual network connections can help spot any attempted abuse.
Maintaining an up‑to‑date browser remains one of the most effective defences against web‑based threats. Subscribing to the Chrome release channel, enabling site isolation and keeping safe browsing features activated provide additional layers of protection while users await the next scheduled update.