๐ฅ This vulnerability is being actively exploited in the wild (CISA Known Exploited Vulnerabilities catalog)
CVE-2026-11645: Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
Summary
Google Chromium V8 contains an out-of-bounds read and write vulnerability (a bug where code accesses memory locations it shouldn't, potentially corrupting data) that could let attackers run malicious code inside a sandbox through a specially crafted HTML page. This affects multiple browsers built on Chromium, like Chrome, Edge, and Opera, and is currently being exploited by attackers in real attacks.
Solution / Mitigation
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. Due date: 2026-06-23. See vendor updates at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html
Vulnerability Details
EPSS: 0.1%
Yes
๐ฅ Actively Exploited
June 8, 2026
Classification
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-11645
First tracked: June 9, 2026 at 02:00 PM
Classified by LLM (prompt v3) ยท confidence: 95%