CVE-2026-11645
HIGH
CVSS: 8.8
EPSS: 2.2%
VulnCheck KEV
PoC Available
CWE-125
CWE-787
T1005
T1203
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Published: 2026-06-09