🚨Critical - Four Use-After-Free Flaws Patched in Google Chrome 149 (CVE-2026-11634, CVE-2026-11638, CVE-2026-11651, CVE-2026-11671) Google's June 2026 Chrome Stable update fixes four use-after-free vulnerabilities (CWE-416), each reachable through a crafted HTML page. CVE-2026-11634 (Gamepad) and CVE-2026-11638 (Printing) are rated Critical by Chromium; CVE-2026-11651 (Network) and CVE-2026-11671 (Navigation) are rated High. In each case a victim visiting a malicious page can trigger access to freed memory, leading to memory corruption and a potential renderer sandbox escape. All share a CVSS 9.6 profile - network, low complexity, no privileges, user interaction required, scope change, full C/I/A impact. Because Chromium is shared, downstream browsers like Edge, Brave, Opera, and Vivaldi inherit the same fixes. None of these four has confirmed in-the-wild exploitation. 👉Upgrade to Chrome 149.0.7827.102/.103 (Windows/Mac) or 149.0.7827.102 (Linux).
Post summary
The tweet reports that Google Chrome 149 has patched four use‑after‑free flaws, provides technical details, but no evidence of active exploitation or PoCs; it encourages users to upgrade.