Google’s latest Chrome 150 security patch addresses 27 flaws, with two critical use‑after‑free bugs in the Ozone and Views components. The update also resolves 13 memory‑safety defects and a range of other vulnerabilities, reinforcing browser security for all users.
On Wednesday, Google rolled out the Chrome 150 security update, closing a total of 27 vulnerabilities, two of which were critical‑severity use‑after‑free bugs discovered last month. These defects were located in Chrome’s Ozone and Views components, which are integral to the browser’s rendering engine.
Memory‑Safety Fixes
The patch addresses 13 use‑after‑free errors—10 rated high and one medium severity—alongside 14 other memory‑related issues such as uninitialized use, integer overflow, out‑of‑bounds read/write, insufficient validation of untrusted input, and weak policy enforcement. Together, these fixes significantly tighten Chrome’s memory safety and input validation layers.
Bug‑Bounty Trends and AI Influence
Only three external researchers reported new defects, earning a total of $3,000 in bug‑bounty rewards. Over the past two months, Google has fixed more than 1,400 Chrome vulnerabilities, including hundreds of memory‑safety bugs. The trend, fueled by AI‑assisted code analysis, has lowered individual bounty payouts but increased the overall number of weaknesses addressed.
Availability and Update Process
Version 150.0.7871.114/115 is now available for Windows and macOS, while Linux users can download 150.0.7871.114. Users are urged to enable automatic updates to ensure they receive the latest security patches promptly.
Looking Ahead
As browsers increasingly host complex JavaScript and AI‑generated content, the importance of robust memory safety and input validation grows. Google’s ongoing update cadence, combined with community‑driven vulnerability discovery, sets a strong precedent for maintaining browser security in a rapidly evolving threat landscape.
