CVE Catalog

CVE-2026-11033

MediumCVSS 6.5
Published: Updated: Translated: NVD NIST

Summary

In Google Chrome on Mac prior to version 149.0.7827.53, an uninitialized use in WebML allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

Risk Assessment

An attacker could gain access to confidential data, posing a threat to user privacy and organizational security.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Uninitialized Use in WebML in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS