What is the CVSS score of EUVD-2026-40712?

EUVD-2026-40712 has a CVSS 3.1 base score of 8.8 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Google Chrome are affected by EUVD-2026-40712?

Google Chrome on Linux is vulnerable to heap corruption that could allow remote attackers to crash the browser or potentially execute code after tricking users to visit a malicious webpage and…. A patch is available.

How to fix or mitigate EUVD-2026-40712?

Within 24 hours: Inventory Chrome deployments on Linux systems and identify user populations. Within 7 days: Deploy Chrome version 150.0.7871.47 or later enterprise-wide using auto-update settings, managed deployment tools, or targeted user notifications. Within 30 days: Verify patch deployment success via browser telemetry and confirm >95% of managed Chrome instances are running version 150.0.7871.47 or later.

Google Chrome EUVD-2026-40712

| CVE-2026-14024 HIGH

Use After Free (CWE-416)

2026-06-30 chrome-cve-admin@google.com

GHSA-2x2m-wp42-98x6

Memory Corruption Denial Of Service Use After Free Google Suse

8.8

CVSS 3.1 · Vendor: google

Severity by source

Vendor (google) PRIMARY

8.8 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

8.8 HIGH

Remote crafted page (AV:N), no privileges (PR:N) but mandatory user gestures (UI:R); UAF heap corruption in the browser process yields full C/I/A within an unchanged scope.

3.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

4.0 AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

SUSE

HIGH

qualitative

Primary rating from Vendor (google).

CVSS VectorVendor: google

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 01, 2026 - 15:31 vuln.today

CVSS changed

Jul 01, 2026 - 15:22 NVD

8.8 (HIGH)

CVE Published

Jun 30, 2026 - 23:17 cve.org

HIGH 8.8

CVE Published

Jun 30, 2026 - 23:17 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

AnalysisAI

Use-after-free in Google Chrome's Ozone component on Linux prior to 150.0.7871.47 lets a remote attacker trigger heap corruption after luring a user to a crafted HTML page and inducing specific UI gestures. Rated CVSS 8.8 with high confidentiality, integrity and availability impact, it is patched in the stable channel but requires user interaction (UI:R). …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access

Lure user to crafted HTML page

Delivery

Induce specific UI gestures

Exploit

Trigger use-after-free in Ozone

Execution

Corrupt browser heap

Persist

Gain memory-corruption primitive

Impact

Attempt code execution in browser process

Access

Lure user to crafted HTML page

Delivery

Induce specific UI gestures

Exploit

Trigger use-after-free in Ozone

Execution

Corrupt browser heap

Persist

Gain memory-corruption primitive

Impact

Attempt code execution in browser process

Vulnerability AssessmentAI

Exploitation	Exploitation requires a Linux build of Chrome older than 150.0.7871.47 rendering an attacker-crafted HTML page, AND the victim performing 'specific UI gestures' - per the description this user interaction is a hard prerequisite (reflected in CVSS UI:R), not incidental. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	Signals are mixed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An attacker hosts a crafted HTML page and social-engineers a Linux Chrome user into visiting it and performing particular UI interactions (the specific gestures the bug requires). Those gestures drive the Ozone code path that reuses freed heap memory, corrupting the heap and giving the attacker a memory-corruption primitive that could be developed toward code execution in the browser process. …
Remediation	Vendor-released patch: update Google Chrome on Linux to 150.0.7871.47 or later via the stable channel, then fully restart the browser to load the new binary; enterprise fleets should push the update through their managed Chrome/repository channel and verify the running version. … Detailed patch versions, workarounds, and compensating controls in full report.