CVE-2026-11091
Google Chrome, chrome, macos
Inappropriate implementation in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
- CVSS
- 8.8
- EPSS
- 0.25% 16.1% percentile
- CISA KEV
- Not listed
- Published
- 2026.06.05