PT-2026-47457

CVE-2026-11631

·

Published

2026-06-08

·

Updated

2026-08-31

Description by

CVSS 3.1
8.3
High
MetricsAV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.103
Description A use after free issue in Aura on Windows allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. This is achieved through the use of a crafted HTML page.
Recommendations Update to version 149.0.7827.103 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ECHO-EA38-5153-ED4E
OPENSUSE-SU-2026:11008-1
OPENSUSE-SU-2026:20944-1
OPENSUSE-SU-2026:21135-1
Found an issue in the description? Have something to add? Feel free to write us 👾