PT-2026-47471 · Google · Google Chrome+1

CVE-2026-11645 · Published 2026-06-08 · Updated 2026-07-23

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.103

Description An out-of-bounds read and write issue exists in V8, the JavaScript and WebAssembly engine used by Google Chrome. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by enticing a user to visit a specially crafted HTML page. The issue has been actively exploited in the wild and can be used to bypass security mechanisms such as ASLR (Address Space Layout Randomization), which is a technique used to prevent the execution of arbitrary code by randomizing the memory addresses used by system processes.

Recommendations Update Google Chrome to version 149.0.7827.103 or later and fully restart the browser to activate the patch.

Fix

LPE

RCE

DoS

Memory Corruption

Out of bounds Read

Weakness Enumeration

CWE-787

CWE-125

Related Identifiers

BDU:2026-08030

CVE-2026-11645

ECHO-1E0D-95C5-C92E

OPENSUSE-SU-2026:11008-1

OPENSUSE-SU-2026:20944-1

Affected Products

Google Chrome

V8

References · 221

• https://osv.dev/vulnerability/openSUSE-SU-2026:20944-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:11008-1 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/733483 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-11645 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-08030 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11645 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-11645 · Vendor Advisory
• https://issues.chromium.org/issues/506689381 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-11645 · Security Note
• https://t.me/cibsecurity/89684 · Telegram Post
• https://suse.com/security/cve/CVE-2026-11674 · Note
• https://t.me/avleonovcom/1665 · Telegram Post
• https://suse.com/security/cve/CVE-2026-11660 · Note
• https://suse.com/security/cve/CVE-2026-11670 · Note
• https://suse.com/security/cve/CVE-2026-11649 · Note