VulnSocial

CVE-2026-11659Disclosure(google / chrome)

LOWCVSS 9.6 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch google chrome systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Integer overflow in UI in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

google CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-20

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome
  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 3d ago at 1 mentions (2026-06-09); latest day: 1
  • 4 total mentions across 4 days

Affected systems

Vendors
googlelinux
Products
chromelinux_kernel

1 version affected across 2 products

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-06-09: 1Mentions · 2026-07-01: 1Mentions · 2026-07-08: 1Mentions · 2026-07-10: 1Patch / Workaround · 2026-06-09: 1Technical Details · 2026-06-09: 106-0907-0107-0807-10
Signal classification3 categories
Disclosure
250.0%
Patch
125.0%
General
125.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-06-091
Patch1
2026-07-011
Disclosure1
2026-07-081
Disclosure1
2026-07-101
General1
Full discourse4 posts
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Disclosure

    【緊急】CVE-2026-11659 Google Chrome Linux版 149.0.7827.103以前に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/06/22/cve-2026-11659-google-chrome-linux-14907827103/ #IT #Security #cybersecurity

    Post summary

    An emergency alert announces a new severe vulnerability (CVE-2026-11659) affecting Google Chrome on Linux prior to version 149.0.7827.103, urging immediate action, but it lacks detailed technical data, PoC, exploit code, or patch information.

    0000154
    207 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    General

    【緊急】CVE-2026-11659 Google Chrome Linux版 149.0.7827.103以前に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/02/cve-2026-11659-google-chrome-linux-14907827103/ #IT #Security #cybersecurity

    Post summary

    The message alerts users to a serious vulnerability (CVE‑2026‑11659) affecting Google Chrome Linux versions before 149.0.7827.103 and urges immediate action, but provides no technical details, exploit code, or patch information.

    0000046
    206 followersView on X
  • ケイ | IT・セキュリティ系副業Webライター@Teeeda_worker
    Disclosure

    【緊急】CVE-2026-11659 Google Chrome Linux版 149.0.7827.103以前に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/02/cve-2026-11659-google-chrome-linux-14907827103/ #IT #Security #cybersecurity

    Post summary

    The post announces a severe vulnerability (CVE-2026-11659) in older Google Chrome Linux builds and urges immediate action.

    0000055
    208 followersView on X
  • Upwind Security MDR@UpwindMDR
    Patch

    🚨High - Three Browser Flaws Patched in Google Chrome 149 (CVE-2026-11654, CVE-2026-11659, CVE-2026-11697) Google's June 2026 Chrome Stable update fixes these three among 74 security issues. CVE-2026-11654 is a use-after-free in the CameraCapture component (macOS). A victim visiting a crafted HTML page can trigger freed-memory access and potentially a renderer sandbox escape - CISA scored it 9.6. CVE-2026-11659 and CVE-2026-11697 are insufficient-validation-of-untrusted-input issues in the UI component, both rated High by Chromium, where crafted input can bypass the browser's validation logic. CVSS scores for these two are still pending. Because Chromium is shared, downstream browsers like Edge, Brave, Opera, and Vivaldi inherit the same fixes. None of these three is the in-the-wild bug in this update (that is a separate V8 flaw). 👉Upgrade to Chrome 149.0.7827.102/.103 (Windows/Mac) or 149.0.7827.102 (Linux).

    Post summary

    The update is a patch announcement detailing three high‑severity browser vulnerabilities, with explicit upgrade guidance and technical specifications but no PoC, exploit code, or active exploitation claims.

    00000143
    207 followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appgooglechrome---
OSlinuxlinux_kernel---

Explore more

Back to dashboardgoogle CVEslinux CVEschrome vulnerabilities