CVE Catalog
CVE-2026-11250
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
Inappropriate implementation in DevTools of Google Chrome prior to 149.0.7827.53 allows a remote attacker who has compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium severity: Low.
Risk Assessment
An attacker could steal sensitive data from browser memory, such as passwords or session tokens.
Recommendation
Update Google Chrome to version 149.0.7827.53 or later.
Original NVD description (English source)
Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Low)