PatchSiren cyber security CVE debrief
CVE-2026-11013 Google CVE debrief
CVE-2026-11013 is a Medium severity vulnerability in Google Chrome prior to version 149.0.7827.53. The vulnerability is caused by insufficient validation of untrusted input in the Network component, allowing a remote attacker who has compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page.
- Vendor
- Product
- Chrome
- CVSS
- MEDIUM 6.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-04
- Original CVE updated
- 2026-06-08
- Advisory published
- 2026-06-04
- Advisory updated
- 2026-06-08
Who should care
Users of Google Chrome prior to version 149.0.7827.53
Technical summary
The vulnerability has a CVSS score of 6.5 and is classified as CWE-20. The affected product is Google Chrome, with a CPE criteria of cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
Defensive priority
Medium
Recommended defensive actions
- Update Google Chrome to version 149.0.7827.53 or later
Evidence notes
Evidence from NVD and CVE.org
Official resources
-
CVE-2026-11013 CVE record
CVE.org
-
CVE-2026-11013 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Release Notes, Vendor Advisory
-
Source reference
[email protected] - Permissions Required
CVE-2026-11013 was published on 2026-06-04T23:17:05.193Z and modified on 2026-06-08T17:07:08.663Z.