CVEFinder.io

CVE-2026-15112

⚠️ high
🔍 Scan for this CVE
Summary

Use after free in Ozone in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

CVSS Score
8.8
High
EPSS Score
0.3
Exploit Probability
Published Date
2026-07-08
First Seen: 2026-07-09
📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 81.1% of all 338,292 vulnerabilities in our database.

#64,055
Top 25% most severe
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jul 9, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-07-10
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)

📦 Affected Products 1

🔗 References 2

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-15900 ⛔ critical 9.6 0.2 Use after free in GPU in Google Chrome on Android prior to 150.0.7871.128 allowed a remote attacker to potentially perfo... 2026-07-20
CVE-2026-15901 ⛔ critical 9.6 0.3 Use after free in Network in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to potentially exploit heap... 2026-07-20
CVE-2026-15902 ⚠️ high 8.8 0.3 Use after free in Cast in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitrary code insi... 2026-07-20
CVE-2026-15903 ⚠️ high 8.8 0.3 Out of bounds read and write in V8 in Google Chrome prior to 150.0.7871.128 allowed a remote attacker to execute arbitra... 2026-07-20
CVE-2026-15904 ⚠️ high 8.8 0.2 Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.128 allowed a remote attacker who convinced a user... 2026-07-20
CVE-2026-15905 ⚠️ high 7.8 0.1 Use after free in Aura in Google Chrome prior to 150.0.7871.128 allowed a local attacker to potentially exploit heap cor... 2026-07-20
These CVEs affect the same products