Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2026-11191: Google Chrome Memory Access Risk: Remote Attack Possible
CVE-2026-11191 · published 5 months ago
Summary
A security flaw in Google Chrome's graphics handling could allow a hacker to access memory outside of the intended area. This could potentially lead to data theft or system crashes. Update to the latest version of Google Chrome to fix this issue.
What to do
- Update debian chromium to version 149.0.7827.53-1~deb12u1.
- Update debian chromium to version 149.0.7827.53-1~deb13u1.
- Update debian chromium to version 149.0.7827.53-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | chromium | All versions |
| Debian:12 | debian | chromium |
< 149.0.7827.53-1~deb12u1 Fix: upgrade to 149.0.7827.53-1~deb12u1
|
| Debian:13 | debian | chromium |
< 149.0.7827.53-1~deb13u1 Fix: upgrade to 149.0.7827.53-1~deb13u1
|
| Debian:14 | debian | chromium |
< 149.0.7827.53-1 Fix: upgrade to 149.0.7827.53-1
|
Original advisory text
Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security...
Out of bounds memory access in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-125Out-of-bounds Read
Timeline
Published4 Jun 2026
Updated3 Nov 2026
First seen5 Jun 2026
Track software like this
Free during beta