CVE-2026-11153

CriticalCVSS 9.1

Published: 04/06/2026(UTC)Updated: 23/07/2026(UTC)Translated: 24/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

Google Chrome prior to version 149.0.7827.53 has a side-channel information leakage vulnerability in Forms. A remote attacker can use a crafted HTML page to leak cross-origin data.

Risk Assessment

An attacker can access sensitive user data from other websites, potentially leading to session theft or credential compromise.

Recommendation

Update Google Chrome to version 149.0.7827.53 or later.

Original NVD description (English source)

Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)