CVE-2026-11641
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Use after free in Bluetooth in Google Chrome on Windows prior to version 149.0.7827.103 allows a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page.
Risk Assessment
This vulnerability poses a significant risk to organizations as it allows remote code execution, potentially leading to full control over the user's system.
Recommendation
It is recommended to update Google Chrome to version 149.0.7827.103 or later to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Use after free in Bluetooth in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)