CVE-2026-11645

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.103

Description An out-of-bounds read and write issue exists in the V8 JavaScript and WebAssembly engine. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a user to visit a specially crafted HTML page. The issue can also be used to bypass security mechanisms such as ASLR (Address Space Layout Randomization), which is a technique used to prevent the exploitation of memory vulnerabilities by randomizing the memory addresses used by system processes. This flaw has been actively exploited in the wild.

Recommendations Update Google Chrome to version 149.0.7827.103 or later.