CVE-2026-11634Disclosure(google / chrome)

LOWCVSS 9.6 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch google chrome systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in Gamepad in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Critical)

1.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome
  • windows

Threat summary

  • Patch or workaround signal is available
  • 5 mentions across 5 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 4d ago at 1 mentions (2026-06-09); latest day: 1
  • 5 total mentions across 5 days

Affected systems

Products
chromewindows

1 version affected across 2 products

Deep dive

Activity timeline5 mentions / 5d
00111Mentions · 2026-06-09: 1Mentions · 2026-06-26: 1Mentions · 2026-07-03: 1Mentions · 2026-07-04: 1Mentions · 2026-07-10: 1Patch / Workaround · 2026-06-09: 1Technical Details · 2026-06-09: 1Technical Details · 2026-07-03: 106-0906-2607-0307-0407-10
Signal classification3 categories
Disclosure
360.0%
Patch
120.0%
General
120.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-091
Patch1
2026-06-261
General1
2026-07-031
Disclosure1
2026-07-041
Disclosure1
2026-07-101
Disclosure1
Full discourse5 posts
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Disclosure

    【緊急】CVE-2026-11634 Google Chrome 149.0.7827.103以前のWindows版に深刻な脆弱性|即時対応が必要 https://www.cybernote.click/2026/07/02/cve-2026-11634-google-chrome-14907827103windows/ #IT #Security #cybersecurity

    Post summary

    The post announces a serious vulnerability (CVE-2026-11634) affecting Chrome 149.0.7827.103 and earlier Windows versions, urging immediate action.

    0000155
    209 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Disclosure

    【緊急】CVE-2026-11634 Google Chrome 149.0.7827.103以前のWindows版に深刻な脆弱性|即時対応が必要 https://www.cybernote.click/2026/07/02/cve-2026-11634-google-chrome-14907827103windows/ #IT #Security #cybersecurity

    Post summary

    The post alerts that CVE-2026-11634 poses a serious vulnerability for Chrome Windows versions earlier than 149.0.7827.103 and urges immediate action, but no patch details or exploit information are supplied.

    0000151
    209 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Disclosure

    【緊急】CVE-2026-11634 Google Chrome 149.0.7827.103以前のWindows版に深刻な脆弱性|即時対応が必要 https://www.cybernote.click/2026/07/02/cve-2026-11634-google-chrome-14907827103windows/ #IT #Security #cybersecurity

    Post summary

    The post warns that CVE-2026-11634 is a serious vulnerability affecting older Windows builds of Google Chrome and urges users to respond immediately, but it provides no technical details, PoC, or patch information.

    0000043
    206 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    General

    【緊急】CVE-2026-11634 Google Chrome 149.0.7827.103以前のWindows版に深刻な脆弱性|即時対応が必要 https://www.cybernote.click/2026/06/23/cve-2026-11634-google-chrome-14907827103windows/ #IT #Security #cybersecurity

    Post summary

    An urgent announcement alerts users to CVE‑2026‑11634 affecting Chrome 149.0.7827.103 or earlier on Windows, but no PoC, exploit details, patch information, or active exploitation evidence is provided.

    0000053
    208 followersView on X
  • Upwind Security MDR@UpwindMDR
    Patch

    🚨Critical - Four Use-After-Free Flaws Patched in Google Chrome 149 (CVE-2026-11634, CVE-2026-11638, CVE-2026-11651, CVE-2026-11671) Google's June 2026 Chrome Stable update fixes four use-after-free vulnerabilities (CWE-416), each reachable through a crafted HTML page. CVE-2026-11634 (Gamepad) and CVE-2026-11638 (Printing) are rated Critical by Chromium; CVE-2026-11651 (Network) and CVE-2026-11671 (Navigation) are rated High. In each case a victim visiting a malicious page can trigger access to freed memory, leading to memory corruption and a potential renderer sandbox escape. All share a CVSS 9.6 profile - network, low complexity, no privileges, user interaction required, scope change, full C/I/A impact. Because Chromium is shared, downstream browsers like Edge, Brave, Opera, and Vivaldi inherit the same fixes. None of these four has confirmed in-the-wild exploitation. 👉Upgrade to Chrome 149.0.7827.102/.103 (Windows/Mac) or 149.0.7827.102 (Linux).

    Post summary

    Google Chrome 149 patches four critical use‑after‑free flaws; no known wild exploitation; users are urged to update to the new version.

    00000139
    210 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appgooglechrome---
OSmicrosoftwindows---

Explore more