PT-2026-46670 · Google · Google Chrome

CVE-2026-11143 · Published 2026-06-04 · Updated 2026-06-05

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome on Linux versions prior to 149.0.7827.53

Description An out of bounds read in Extensions allows an attacker to obtain potentially sensitive information from process memory. This occurs when a user is convinced to install a crafted malicious extension.

Recommendations Update to version 149.0.7827.53 or later.

Fix

DoS

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

CVE-2026-11143

ECHO-CFF7-76EC-8DEF

OPENSUSE-SU-2026:10958-1

Affected Products

Google Chrome

References · 437

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-11143 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-11143 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11143 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-11143 · Security Note
• https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10958-1 · Vendor Advisory
• https://suse.com/security/cve/CVE-2026-10977 · Note
• https://suse.com/security/cve/CVE-2026-11040 · Note
• https://suse.com/security/cve/CVE-2026-11253 · Note
• https://suse.com/security/cve/CVE-2026-10994 · Note
• https://suse.com/security/cve/CVE-2026-11125 · Note
• https://suse.com/security/cve/CVE-2026-11164 · Note
• https://suse.com/security/cve/CVE-2026-11300 · Note
• https://suse.com/security/cve/CVE-2026-11307 · Note
• https://suse.com/security/cve/CVE-2026-11200 · Note