vulnerability context

CVE-2026-11699

CVSS 8.8 HIGHEPSS 10%CWE-416OTX 5 pulses

Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Published 2026-06-09 · last modified 2026-06-17

details

CISA KEV status: Not in catalog
CVSS v3: 8.8 / HIGH
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS: 10% percentile (score 0.0020)
CWE: CWE-416
OTX pulses: 5 total, 0 recent

View on NVD → · cve.org

source mentions 2

Chromium: CVE-2026-11699 Use after free in BluetoothMSRC Update Guide · 7d ago
[CVE Alerts ] CVE-2026-11699 - Google Chrome Use-After-Free in Bluetooth CVE ID : CVE-2026-11699 Published : June 9, 2026, 12:1...Bluesky · 14d ago

source consensus

MSRC Update Guide1×
Bluesky1×

Want the 3-bullet summary of CVE-2026-11699, plus webhook alerts when KEV is updated? Pro is $10/mo.

Open in reader See Pro →