CVE-2026-11645
Description
CVE-2026-11645 is a high-severity RCE vulnerability in Google Chrome's V8 engine actively exploited in the wild. Update to version 149.0.7827.103.
CPE
| Product | Version Start | Version End (excl.) | Status |
|---|---|---|---|
| chrome | * | 149.0.7827.103 | vulnerable |
| macos | - | - | unaffected |
| linux_kernel | - | - | unaffected |
| windows | - | - | unaffected |
Related weakness (CWE)
Remediation plan
Apply official patches
Update Google Chrome to version 149.0.7827.103 or later immediately. Google has released stable channel updates for Windows, Mac, and Linux to address this memory safety issue in the V8 engine.
Update affected systems
Ensure all Chromium-based browsers and applications using the V8 engine are updated to versions higher than 149.0.7827.103. Use automated patch management tools to verify versioning across all managed endpoints.
Restrict access
Implement web filtering and DNS security controls to block access to known malicious or suspicious domains. This reduces the likelihood of users encountering the crafted HTML pages used to trigger the exploit.
Monitor for exploitation
Use endpoint detection and response (EDR) tools to monitor for unusual child processes spawning from Chrome or frequent, unexplained browser crashes, which may indicate attempted exploitation of memory corruption.
Detection Guidance
Organizations should monitor for unusual network traffic originating from browser processes towards unverified external domains. Detection should focus on identifying Chromium versions older than 149.0.7827.103 within the environment. Security teams should also analyze crash logs for V8 memory allocation errors or out-of-bounds access. Implementing YARA rules to scan for malicious JavaScript patterns targeting V8 memory structures can further aid in identifying active exploitation attempts.