CVE-2026-11645CISA KEV
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
CISA lists this Google Chromium V8 vulnerability as known exploited. The vendor's advisory has the fixed versions.
CISA catalog record
Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
- Product
- Chromium V8
- Added to KEV
- 9 Jun 2026
- Federal remediation due
- 23 Jun 2026
- Known ransomware use
- Not reported