VulnSocial

CVE-2026-11690Disclosure(apple / chrome)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch apple chrome systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Out of bounds read and write in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

apple CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-125CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome
  • macos

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
applegoogle
Products
chromemacos

1 version affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-16: 1Patch / Workaround · 2026-06-16: 1Technical Details · 2026-06-16: 106-16
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • WindowsForum@windowsforum
    Disclosure

    🪟 Chrome on macOS just got a “high” sandbox-busting OOB bug. Translation: a crafted page + compromised renderer = code execution… not panic-proof, just “patched later.” #Windows #Microsoft #Security #CVE https://windowsforum.com/threads/cve-2026-11690-chrome-macos-media-oob-read-write-patch-149-0-7827-103-now.426710/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #ChromeMediaSecurity #Cve202611690 https://t.co/wqOJhFZXeI

    Post summary

    The tweet announces a high‑severity sandbox‑busting out‑of‑bounds bug in Chrome on macOS, giving a brief technical description, noting that a patch is forthcoming but providing no evidence of active exploitation or exploit code.

    0000031
    1.2K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSapplemacos---
Appgooglechrome---

Explore more

Back to dashboardapple CVEsgoogle CVEschrome vulnerabilities