CVE-2026-11645
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
- Affected products
- Google Chrome, V8
- Google Chrome
- < 149.0.7827.103
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 2.2% (81th percentile)
- Weakness
- CWE-125, CWE-787
- NVD status
- Analyzed
- Published
- 2026-06-08
CVE-2026-11645 at NVD
8 known exploits for CVE-2026-11645
Proof-of-concept code and exploit modules indexed by Sploitus