Home / CVEs
CVE Database
Published vulnerabilities with severity, known exploitation and official sources.
CVE-2026-11699
High · 8.8
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11698
High · 8.8
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11694
High · 7.5
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11692
High · 8.3
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in Read Anything in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11687
High · 8.8
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in Dawn in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11683
High · 8.8
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in WebCodecs in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11681
High · 8.8
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in Ozone in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11680
High · 8.8
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in Media in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11679
High · 8.3
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in Codecs in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11674
High · 8.8
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in Guest View in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11673
High · 8.8
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in InterestGroups in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11671
Critical · 9.6
CWE-416 Jun 8, 2026
Google Chrome Use-After-Free in Navigation Allows Sandbox Escape
Use after free in Navigation in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11670
High · 8.8
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in PDF in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. (Chromium security severity: High)
CVE-2026-11664
High · 8.8
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in Payments in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11663
High · 8.3
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in Skia in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11661
High · 8.3
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in Views in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11657
High · 8.8
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in Payments in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11656
High · 8.3
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: High)
CVE-2026-11654
Critical · 9.6
CWE-416 Jun 8, 2026
Google Chrome CameraCapture Use-After-Free Sandbox Escape (CVE-2026-11654)
Use after free in CameraCapture in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11652
High · 8.3
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in Extensions in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11651
Critical · 9.6
CWE-416 Jun 8, 2026
Google Chrome Use-After-Free in Network Component
Use after free in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11650
High · 8.8
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11649
High · 8.8
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11648
High · 8.8
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in FullScreen in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2026-11647
High · 8.3
CWE-416 Jun 8, 2026
Use After Free in Google Chrome
Use after free in Printing in Google Chrome on Android prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)