PatchSiren cyber security CVE debrief
CVE-2026-11073 Google CVE debrief
CVE-2026-11073 is a use-after-free vulnerability in WebGL in Google Chrome prior to 149.0.7827.53. This vulnerability allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. The vulnerability has a CVSS score of 6.5 and a severity of MEDIUM. Google Chrome has released a patch for this vulnerability.
- Vendor
- Product
- Chrome
- CVSS
- MEDIUM 6.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-06-04
- Original CVE updated
- 2026-06-08
- Advisory published
- 2026-06-04
- Advisory updated
- 2026-06-08
Who should care
Users of Google Chrome prior to version 149.0.7827.53 should update to the latest version to mitigate this vulnerability.
Technical summary
The vulnerability is a use-after-free issue in WebGL, which allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.
Defensive priority
MEDIUM
Recommended defensive actions
- Update Google Chrome to version 149.0.7827.53 or later.
Evidence notes
The CVE was published on 2026-06-04T23:17:11.960Z and modified on 2026-06-08T15:51:29.590Z.
Official resources
-
CVE-2026-11073 CVE record
CVE.org
-
CVE-2026-11073 NVD detail
NVD
-
Source item URL
nvd_modified
-
Mitigation or vendor reference
[email protected] - Vendor Advisory
-
Source reference
[email protected] - Permissions Required
CVE-2026-11073 was published on [cvePublishedAt] and modified on [cveModifiedAt].