Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in Navigation in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 4 products
| Date | Total | Labels |
|---|
| 2026-06-09 | 1 | Patch1 |
| 2026-06-16 | 1 | Patch1 |
| 2026-07-03 | 1 | Disclosure1 |
【緊急】CVE-2026-11671 Google Chrome 149.0.7827.103以前に深刻な脆弱性｜即時対応が必要 https://www.cybernote.click/2026/07/02/cve-2026-11671-google-chrome-14907827103/ #IT #Security #cybersecurity
Post summary
An urgent alert warns of CVE-2026-11671, a critical vulnerability affecting Chrome versions before 149.0.7827.103, with a call for immediate action, though no patch, PoC, or exploit details are provided.
🪟 Chrome UAF bug (CVE-2026-11671) means your browser is basically a mini-kernel now—one crafted page away from drama. Patch fast; “restart later” is how incidents start. #Windows #Microsoft #Chrome #Security https://windowsforum.com/threads/cve-2026-11671-chrome-navigation-use-after-free-windows-patch-and-restart-guidance.426645/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #ChromeSecurity #WindowsAdministrators https://t.co/m1kStA6VGV
Post summary
The tweet announces a Chrome Use‑After‑Free vulnerability (CVE‑2026‑11671) and urges users to apply a patch and restart, linking to patch guidance. It does not provide PoC, exploit code, or evidence of active exploitation.
🚨Critical - Four Use-After-Free Flaws Patched in Google Chrome 149 (CVE-2026-11634, CVE-2026-11638, CVE-2026-11651, CVE-2026-11671) Google's June 2026 Chrome Stable update fixes four use-after-free vulnerabilities (CWE-416), each reachable through a crafted HTML page. CVE-2026-11634 (Gamepad) and CVE-2026-11638 (Printing) are rated Critical by Chromium; CVE-2026-11651 (Network) and CVE-2026-11671 (Navigation) are rated High. In each case a victim visiting a malicious page can trigger access to freed memory, leading to memory corruption and a potential renderer sandbox escape. All share a CVSS 9.6 profile - network, low complexity, no privileges, user interaction required, scope change, full C/I/A impact. Because Chromium is shared, downstream browsers like Edge, Brave, Opera, and Vivaldi inherit the same fixes. None of these four has confirmed in-the-wild exploitation. 👉Upgrade to Chrome 149.0.7827.102/.103 (Windows/Mac) or 149.0.7827.102 (Linux).
Post summary
Google Chrome 149 patches four critical use‑after‑free flaws, provides upgrade instructions, and notes no confirmed in‑the‑wild exploitation.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |
| App | chrome | - | - | - | |
| OS | linux | linux_kernel | - | - | - |
| OS | microsoft | windows | - | - | - |