CVE-2026-11642

A use after free vulnerability exists in the Web Apps component of Google Chrome (and potentially Microsoft Edge ) prior to version 149.0.7827.103 . An attacker who has compromised the renderer process can exploit this memory management issue via a crafted HTML page to potentially perform a sandb...

CVE-2026-11642

Use after free in Web Apps in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11642

Use after free in Web Apps in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11641

Use after free in Bluetooth in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11640

Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11641

Use after free in Bluetooth in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11641

A Use after free vulnerability exists in the Bluetooth component of Google Chrome on Windows versions prior to 149.0.7827.103 . A remote attacker can execute arbitrary code by convincing a user to perform specific UI gestures while visiting a crafted HTML page. Exploitation details are not provid...

CVE-2026-11640

Integer overflow in libyuv in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11638

Use after free in Printing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11639

Use after free in Compositing in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11639

Use after free in Compositing in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11638

A Use after free vulnerability in the Printing component of Google Chrome (and potentially Microsoft Edge ) allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This flaw occurs when memory is reused after being released. Remediation is available in Chrome ver...

CVE-2026-11639

A use after free vulnerability exists in the Compositing component of Google Chrome on Mac (prior to version 149.0.7827.103 ). This flaw allows a remote attacker to execute arbitrary code by hosting a crafted HTML page . The vulnerability is categorized as Critical by Chromium security. For Debia...

CVE-2026-11638

Use after free in Printing in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11636

Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11636

Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11636

Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11637

Google Chrome on Mac is vulnerable to a use after free flaw in Views prior to version 149.0.7827.103 . A remote attacker can exploit this via a crafted HTML page to achieve arbitrary code execution . The vulnerability is characterized as a resource management error where views are reused after be...

CVE-2026-11637

Use after free in Views in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11636

A use after free vulnerability exists in the Autofill component of Google Chrome on Windows (versions prior to 149.0.7827.103 ). This flaw allows a remote attacker to exploit heap corruption by tricking a user into performing specific UI gestures while visiting a crafted HTML page . The vulnerabi...