CVE-2026-11651Disclosure(apple / chrome)

LOWCVSS 9.6 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch apple chrome systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Use after free in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

apple CVEs Back to dashboard

1.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html

Other references

https://issues.chromium.org/issues/511736002

Weakness type (CWE)

CWE-416

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

chrome
linux_kernel
macos
windows

Threat summary

Patch or workaround signal is available
5 mentions across 5 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
Disclosure: 4 classified signals
Peaked 4d ago at 1 mentions (2026-06-09); latest day: 1
5 total mentions across 5 days

Affected systems

Vendors

apple google linux microsoft

Products

chromelinux_kernelmacoswindows

1 version affected across 4 products

Deep dive

Activity timeline5 mentions / 5d

Signal classification2 categories

Disclosure

480.0%

Patch

120.0%

Referenced assets1 URL

By indicator

https://www.cybernote.click/2026/07/02/cve-2026-11651-google-chrome-14907827103/

Classification over time

Date	Total	Labels

2026-06-09	1	Patch1
2026-07-03	1	Disclosure1
2026-07-05	1	Disclosure1
2026-07-10	1	Disclosure1
2026-07-11	1	Disclosure1

Full discourse5 posts

ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker112d
Disclosure
【緊急】CVE-2026-11651 Google Chrome 149.0.7827.103以前に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/02/cve-2026-11651-google-chrome-14907827103/ #IT #Security #cybersecurity
Post summary
The notice alerts that CVE‑2026‑11651 is a severe vulnerability affecting Google Chrome versions older than 149.0.7827.103, urging users to respond immediately, but provides no technical or exploit details.
0000143
209 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker104d
Disclosure
【緊急】CVE-2026-11651 Google Chrome 149.0.7827.103以前に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/02/cve-2026-11651-google-chrome-14907827103/ #IT #Security #cybersecurity
Post summary
The post announces a critical vulnerability (CVE‑2026‑11651) affecting Google Chrome versions prior to 149.0.7827.103 and urges immediate action, but offers no technical, exploit, or patch details.
0000047
206 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker105d
Disclosure
【緊急】CVE-2026-11651 Google Chrome 149.0.7827.103以前に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/02/cve-2026-11651-google-chrome-14907827103/ #IT #Security #cybersecurity
Post summary
The post alerts that CVE‑2026‑11651 is a serious vulnerability affecting Chrome versions prior to 149.0.7827.103 and urges immediate action, but offers no technical details, exploit, patch, or confirmation of active use.
0000045
206 followersView on X
ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker110d
Disclosure
【緊急】CVE-2026-11651 Google Chrome 149.0.7827.103以前に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/02/cve-2026-11651-google-chrome-14907827103/ #IT #Security #cybersecurity
Post summary
The text announces a severe vulnerability (CVE‑2026‑11651) affecting Chrome versions prior to 149.0.7827.103, urging immediate action but providing no technical or mitigation details.
0000044
210 followersView on X
Upwind Security MDR@UpwindMDR136d
Patch
🚨Critical - Four Use-After-Free Flaws Patched in Google Chrome 149 (CVE-2026-11634, CVE-2026-11638, CVE-2026-11651, CVE-2026-11671) Google's June 2026 Chrome Stable update fixes four use-after-free vulnerabilities (CWE-416), each reachable through a crafted HTML page. CVE-2026-11634 (Gamepad) and CVE-2026-11638 (Printing) are rated Critical by Chromium; CVE-2026-11651 (Network) and CVE-2026-11671 (Navigation) are rated High. In each case a victim visiting a malicious page can trigger access to freed memory, leading to memory corruption and a potential renderer sandbox escape. All share a CVSS 9.6 profile - network, low complexity, no privileges, user interaction required, scope change, full C/I/A impact. Because Chromium is shared, downstream browsers like Edge, Brave, Opera, and Vivaldi inherit the same fixes. None of these four has confirmed in-the-wild exploitation. 👉Upgrade to Chrome 149.0.7827.102/.103 (Windows/Mac) or 149.0.7827.102 (Linux).
Post summary
The tweet announces that Google Chrome 149 patches four critical use‑after‑free vulnerabilities, providing CVSS and technical details but no PoC, exploit code, or evidence of active exploitation.
00000139
210 followersView on X

CPE platform detail4 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

4 of 4 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	apple	macos	-	-	-
App	google	chrome	-	-	-
OS	linux	linux_kernel	-	-	-
OS	microsoft	windows	-	-	-

Explore more

Back to dashboard apple CVEs google CVEs linux CVEs chrome vulnerabilities

What researchers are saying

CVE-2026-11651

Upwind Security MDR[verified]@UpwindMDRPatch

The tweet announces that Google Chrome 149 patches four critical use‑after‑free vulnerabilities, providing CVSS and technical details but no PoC, exploit code, or evidence of active exploitation.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerDisclosure

The notice alerts that CVE‑2026‑11651 is a severe vulnerability affecting Google Chrome versions older than 149.0.7827.103, urging users to respond immediately, but provides no technical or exploit details.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerDisclosure

The post announces a critical vulnerability (CVE‑2026‑11651) affecting Google Chrome versions prior to 149.0.7827.103 and urges immediate action, but offers no technical, exploit, or patch details.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerDisclosure

The post alerts that CVE‑2026‑11651 is a serious vulnerability affecting Chrome versions prior to 149.0.7827.103 and urges immediate action, but offers no technical details, exploit, patch, or confirmation of active use.

ケイ | IT・セキュリティ系副業Webライター@Teeeda_workerDisclosure

The text announces a severe vulnerability (CVE‑2026‑11651) affecting Chrome versions prior to 149.0.7827.103, urging immediate action but providing no technical or mitigation details.