CVE-2026-11665

MediumCVSS 4.3

Published: 09/06/2026(UTC)Updated: 09/06/2026(UTC)Translated: 10/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.03%

7th percentile - higher than 7% of all known CVEs

Summary

In Google Chrome on Windows prior to version 149.0.7827.103, an out of bounds read vulnerability allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Risk Assessment

This vulnerability may lead to the exposure of sensitive user data, posing a significant security risk to the organization.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

Out of bounds read in Dawn in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)