Chrome Patches Wildly Exploited V8 Zero-Day CVE-2026-11645

1 min read
Source: The Hacker News
Chrome Patches Wildly Exploited V8 Zero-Day CVE-2026-11645
Photo: The Hacker News
TL;DR Summary

Google rolled out updates to fix 74 Chrome vulnerabilities, including CVE-2026-11645—a critical out-of-bounds read/write in V8 that is being exploited in the wild to execute arbitrary code via a crafted HTML page. Users should update to Chrome 149.0.7827.102/103 on Windows/macOS and 149.0.7827.102 on Linux, and apply fixes in other Chromium-based browsers as available. Google notes this is the fifth actively exploited Chrome zero-day addressed this year, alongside CVE-2026-2441, 2026-3909, 2026-3910, and 2026-5281.

Share this article

Reading Insights

Total Reads

1

Unique Readers

25

Time Saved

1 min

vs 2 min read

Condensed

74%

27672 words

Want the full story? Read the original article

Read on The Hacker News