CVE Catalog

CVE-2026-11633

HighCVSS 8.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.08%

24th percentile - higher than 24% of all known CVEs

Summary

A use after free vulnerability in Bluetooth in Google Chrome on Mac prior to version 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a malicious peripheral.

Risk Assessment

This vulnerability poses a significant risk to organizations by allowing attackers to remotely take control of the user's system.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this critical vulnerability.

Original NVD description (English source)

Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a malicious peripheral. (Chromium security severity: Critical)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS