CVE-2026-11111

CVE-2026-11111 is an out-of-bounds read in ANGLE affecting Google Chrome (Chromium-based) prior to 149.0.7827.53. The vulnerability enables a remote attacker to perform an out-of-bounds memory read via a crafted HTML page. Several connected sources confirm this as a Chromium/ANGLE issue and indic...

CVE-2026-11087

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11066

The CVE-2026-11066 entry concerns Insufficient validation of untrusted input in ANGLE used by Google Chrome. Affected: ANGLE component within Chrome (pre-149.0.7827.53). Impact: allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Underlying cause: insufficien...

CVE-2026-11055

Use after free in ANGLE in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11051

CVE-2026-11051 describes an out-of-bounds read in ANGLE used by Google Chrome on Linux, enabling a remote attacker to potentially read sensitive process memory via a crafted HTML page. Affected component: ANGLE within Chrome. Underlying cause: out-of-bounds access in ANGLE handling of HTML conten...

CVE-2026-11051

Out of bounds read in ANGLE in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11044

Integer overflow in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11043

Out of bounds write in ANGLE in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-11043

CVE-2026-11043: Out-of-bounds write in ANGLE affecting Google Chrome on macOS prior to 149.0.7827.53. Likely allows a remote attacker who compromises the renderer to escape the sandbox via a crafted HTML page. Root cause: ANGLE out-of-bounds write. Remediation: update to Chrome 149.0.7827.53 or n...

CVE-2026-11004

CVE-2026-11004 refers to an out-of-bounds read in ANGLE used by Google Chrome prior to 149.0.7827.53. A remote attacker who has compromised the renderer could obtain potentially sensitive information from process memory via a crafted HTML page. The issue is addressed in Chrome 149.0.7827.53 (and ...

CVE-2026-10979

Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

CVE-2026-10979

CVE-2026-10979 describes an out-of-bounds read in ANGLE used by Google Chrome before 149.0.7827.53. The issue enables a remote attacker to potentially read sensitive data from a process’s memory via a crafted HTML page. The CVE is linked to Chromium components and Chrome update advisories (stable...

CVE-2026-10974

Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-10919

Use after free in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

CVE-2026-10889

Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-10889

CVE-2026-10889 : Out-of-bounds read in ANGLE used by Google Chrome before 149.0.7827.53 allowed a remote attacker who had compromised the renderer to potentially sandbox-escape via a crafted HTML page. Affected component: ANGLE in Chrome. Impact: sandbox escape with high/critical severity as stat...

CVE-2026-10889

Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-10881

Out of bounds read and write in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

PT-2026-46523

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An uninitialized use in ANGLE Almost Native Graphics Layer Engine, an open-source graphics abstraction layer allows a remote attacker to obtain potentially sensitive information from...

PT-2026-46442

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description A use after free issue exists in ANGLE Almost Native Graphics Layer Engine, a compatibility layer between OpenGL ES and native graphics APIs. This flaw allows a remote attacker to execu...