HIGHVulnerability
Verified
Global

CISA KEV: Google Chromium V8 — Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

·Source: CISA KEV

Updated:

Executive Summary

Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Analysis

Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. Added to CISA Known Exploited Vulnerabilities catalog on 2026-06-09. Remediation due: 2026-06-23.

Indicators of Compromise (1)

CVE (1)
CVE-2026-11645
NVDMITRE CVE
Source Attribution

Originally published by CISA KEV on Jun 9, 2026. Verified by: CISA.

Related Threats

MEDIUMVulnerabilityNEW

UK investors sue Binance

Nearly 1700 UK investors have filed a group action legal claim seeking at least £150 million from crypto platform Binance and its founder Changpeng Zhao.

Finextra
MEDIUMVulnerabilityNEW

Danske Bank extends AWS partnership for AI push

Denmark’s Danske Bank is expanding its collaboration with Amazon Web Services as it bids to accelerate the rollout of AI-enabled products and services.

Finextra
MEDIUMVulnerabilityNEW

Instant business payments platform Root emerges from stealth

Root, an instant payments platform that powers receivables, payables, and money transmissions, has emerged from stealth with a mission to modernise money movement in the US.

Finextra