CVE-2026-11644

HighCVSS 7.5

Published: 09/06/2026(UTC)Updated: 09/06/2026(UTC)Translated: 10/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.02%

5th percentile - higher than 5% of all known CVEs

Summary

A use after free vulnerability in Views in Google Chrome on Linux prior to version 149.0.7827.103 allows an attacker to execute arbitrary code via a malicious extension if a user installs it.

Risk Assessment

This vulnerability could lead to serious security breaches, allowing attackers to gain control over the user's system.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to avoid installing unknown extensions.

Original NVD description (English source)

Use after free in Views in Google Chrome on Linux prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. (Chromium security severity: Critical)