Description

Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "7.5",
  "pubDate": "2026-08-06T22:16:56.293Z",
  "pubdate": "2026-08-06T22:16:56.293Z",
  "executiveSummary": "A use-after-free vulnerability exists in the Views component of Google Chrome prior to version 151.0.7922.109.\nThe vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.\nSuccessful exploitation requires the attacker to convince a user to engage in specific UI gestures.\nThe Chromium security severity for this issue is classified as High.\nThe flaw impacts the integrity and stability of the browser process, potentially leading to arbitrary code execution within the context of the application if heap corruption is successfully leveraged.",
  "technicalDetails": "The root cause of the vulnerability is a use-after-free condition residing within the Views framework of Google Chrome.\nA use-after-free occurs when memory is referenced after it has been deallocated, which can happen due to improper object lifecycle management or dangling pointer references during UI rendering or event handling.\nThe attack vector is remote, requiring a victim to visit a specially crafted HTML page controlled by the adversary.\nSpecific user interaction is mandatory for successful exploitation, specifically requiring the user to engage in targeted UI gestures that trigger the vulnerable code path within the Views component.\nUpon rendering the crafted HTML page and receiving the requisite UI input, the application interacts with the freed memory heap location, resulting in memory corruption.\nHeap corruption in this context can alter program control flow or manipulate critical data structures maintained by the heap manager.\nAffected software versions include Google Chrome releases prior to 151.0.7922.109.\nNo authentication or elevated privileges are required by the attacker beyond the ability to deliver the malicious HTML payload and induce the necessary user UI interactions."
}