Google · Chromium V8
CVE-2026-11645
Google Chromium V8 Out-of-Bounds Read and Write Vulnerability
O que é
Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CISA: Google Chromium V8 out-of-bounds read and write vulnerability that could allow a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
O que fazer
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Prazo para as agências federais dos EUA: 23 de junho de 2026
Mais falhas exploradas de Google
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 9 de set. de 2026 | Out of Bounds Write | Chromium V8 | Alto 8,8 | 3,5% |
| 4 de set. de 2026 | Type Confusion | Chromium V8 | Alto 8,8 | 1,8% |
| 13 de mar. de 2026 | Improper Restriction of Operations Within the Bounds of a Memory Buffer | Chromium V8 | Alto 8,8 | 2,7% |
| 19 de nov. de 2025 | Type Confusion | Chromium V8 | Alto 8,8 | 4,9% |
| 23 de set. de 2025 | Type Confusion | Chromium V8 | Alto 8,8 | 9,0% |
| 2 de jul. de 2025 | Type Confusion | Chromium V8 | Alto 8,1 | 14% |
| 5 de jun. de 2025 | Out-of-Bounds Read and Write | Chromium V8 | Alto 8,8 | 7,8% |
| 28 de ago. de 2024 | Inappropriate Implementation | Chromium V8 | Alto 8,8 | 19% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.