Skip to content
6.5 Medium

CVE-2026-11143 Out of bounds read in Extensions in Google Chrome on Linux prior to 149.0.7827.53 allowed an attacker who convinced a…

Description

Out of bounds read in Extensions in Google Chrome on Linux prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. (Chromium security severity: Medium)

Affected products and versions

Product Affected versions Fixed in
Chrome 149.0 earliest → < 149.0.7827.53 149.0.7827.53
The 6072 CVEs of Chrome →
Track this CVE