CVE-2026-11134 vulnerabilities

Vulnerabilities for packages: chromium...

Chromium: CVE-2026-11134 Insufficient data validation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-11134

creationtimestamp| type| source ---|---|--- 2026-06-05 13:24:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/116697713800926918 2026-06-07 18:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/google-chrome-multiple-vulnerabilities20260608 2026-06-07 18:00:00+00:00| seen|...

CVE-2026-11134

A vulnerability exists in the Media component of Google Chrome (and potentially Microsoft Edge as a Chromium-based browser) prior to version 149.0.7827.53 . The root cause is an inappropriate implementation that allows a remote attacker to leak cross-origin data by hosting a crafted HTML page. Ex...