PT-2026-47516 · Google · Google Chrome

CVE-2026-11690 · Published 2026-06-08 · Updated 2026-06-15

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 149.0.7827.103

Description An out of bounds read and write issue exists in the Media component. This allows a remote attacker who has already compromised the renderer process to execute arbitrary code within a sandbox by using a specially crafted HTML page. Out of bounds read and write occurs when a program reads or writes data outside the boundaries of the intended memory buffer, which can lead to memory corruption.

Recommendations Update to version 149.0.7827.103 or later.

Fix

DoS

Memory Corruption

Out of bounds Read

Weakness Enumeration

CWE-787

CWE-125

Related Identifiers

BDU:2026-08575

CVE-2026-11690

ECHO-D7E7-66F4-531B

OPENSUSE-SU-2026:11008-1

OPENSUSE-SU-2026:20944-1

Affected Products

Google Chrome

References · 85

• https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-11690 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2026-11690 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-11690 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11690 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:20944-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:11008-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-08575 · Security Note
• https://suse.com/security/cve/CVE-2026-11679 · Note
• https://suse.com/security/cve/CVE-2026-11678 · Note
• https://suse.com/security/cve/CVE-2026-11655 · Note
• https://suse.com/security/cve/CVE-2026-11667 · Note
• https://suse.com/security/cve/CVE-2026-11654 · Note
• https://suse.com/security/cve/CVE-2026-11643 · Note
• https://suse.com/security/cve/CVE-2026-11690 · Note