CVE-2026-11196
BaseFortify
Publication date: 2026-06-04
Last updated on: 2026-06-04
Assigner: Chrome
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| chrome | to 149.0.7827.53 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-843 | The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a type confusion issue in the XML processing component of Google Chrome versions prior to 149.0.7827.53. It allows a remote attacker to use a specially crafted XML file to cause the browser to mistakenly interpret data types, which can lead to the attacker obtaining potentially sensitive information from the process memory.
How can this vulnerability impact me? :
The impact of this vulnerability is that a remote attacker could exploit it to access sensitive information stored in the memory of the Chrome process. This could include data that the browser is handling at the time, potentially exposing private or confidential information to unauthorized parties.