Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2026-11690: Google Chrome on Mac: Malicious Code Execution
CVE-2026-11690 · published 4 months ago
Summary
If you're using Google Chrome on a Mac, a security issue exists in older versions. A hacker could take control of your browser and execute their own code if they've already compromised your session. Update to the latest version of Google Chrome to fix this issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | chromium | All versions |
| Debian:12 | debian | chromium | All versions |
| Debian:13 | debian | chromium | All versions |
| Debian:14 | debian | chromium | All versions |
Original advisory text
Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox v...
Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
7.5
High
Type
CWE-125Out-of-bounds Read
CWE-787Out-of-bounds Write
Timeline
Published9 Jun 2026
Updated29 Oct 2026
First seen9 Jun 2026
Track software like this
Free during beta