Executive brief
Google Chrome is a widely used web browser. A vulnerability in its Canvas component, which handles 2D and 3D graphics on web pages, could allow an attacker to execute malicious code on a user's computer if they visit a specially crafted website. While the attack is limited by the browser's security sandbox, it could still lead to unauthorized actions or be combined with other flaws to compromise the entire system.
Technical details
A use-after-free (UAF) vulnerability exists in the Canvas component of Google Chrome prior to version 150.0.7871.47. The flaw is triggered when the browser incorrectly manages memory for Canvas objects, allowing an attacker to reference memory after it has been freed. By enticing a user to visit a maliciously crafted HTML page, a remote attacker can exploit this condition to achieve arbitrary code execution (ACE) within the renderer process sandbox. This vulnerability is tracked as CWE-416. Google has released a fix in version 150.0.7871.47 and later.
Affected products
- Google Chrome prior to 150.0.7871.47
Timeline
- 2026-05-14: disclosed: Reported to Chromium by Google researchers
- 2026-06-30: patched: Fixed in Chrome Stable channel update 150.0.7871.47
- 2026-06-30: advisory: NVD publication date