CVE-2026-11645

LLM-synthesized narrative grounded in this CVE's description and references.

• Google/Chrome2 versions

  cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 1 more

  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <149.0.7827.103
  • (no CPE)range: <149.0.7827.103
• osv-coords4 versions

  pkg:apk/chainguard/chromiumpkg:apk/wolfi/chromiumpkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweed

  < 149.0.7827.102-r0+ 3 more

  • (no CPE)range: < 149.0.7827.102-r0
  • (no CPE)range: < 149.0.7827.102-r0
  • (no CPE)range: < 149.0.7827.102-bp160.1.1
  • (no CPE)range: < 149.0.7827.102-1.1

• chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.htmlnvdRelease NotesVendor Advisory
• issues.chromium.org/issues/506689381nvdPermissions Required
• www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource

• ⚡ Weekly Recap: Chrome 0-Day, UniFi Exploits, macOS Stealers, VPN Flaw and More
  The Hacker News · Jun 15, 2026
• Week in review: Exploited Check Point VPN zero-day, Oracle PeopleSoft servers under attack
  Help Net Security · Jun 14, 2026
• CISA Warns of Google Chromium 0-Day Vulnerability Exploited in Attacks
  Cyber Security News · Jun 10, 2026
• CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation
  The Hacker News · Jun 10, 2026
• No Patch Planned for Exploited Arista EOS Vulnerability
  SecurityWeek · Jun 10, 2026
• Google Chrome 0-Day Vulnerability Exploited in the Wild — Update Now
  Cyber Security News · Jun 9, 2026
• Chrome's zero-day Whac-A-Mole continues with fifth exploited bug of the year
  The Register Security · Jun 9, 2026
• Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now
  The Hacker News · Jun 9, 2026
• Google patches Chrome zero-day exploited in the wild (CVE-2026-11645)
  Help Net Security · Jun 9, 2026
• Update Chrome: Google patches actively exploited vulnerability and 73 others
  Malwarebytes Labs · Jun 9, 2026
• Google Releases Patch for Chrome Vulnerability Exploited in the Wild
  Infosecurity Magazine · Jun 9, 2026
• Google patches new Chrome zero-day flaw exploited in the wild
  BleepingComputer · Jun 9, 2026
• Google Patches 5th Chrome Zero-Day Exploited in 2026
  SecurityWeek · Jun 9, 2026
• Google CVE-2026-11645 Added to CISA KEV Under Active Exploitation
  Vypr Intelligence · Jun 9, 2026
• CISA Adds Three Known Exploited Vulnerabilities to Catalog
  CISA Alerts