CVE-2026-11115

chromium-browser: Use after free in Updater

View on CVE.org
Published Jun 4, 2026 CVSS 3.1 · 7.3 High EPSS < 1% KEV · Not listed
Description
Use after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)

Analysis

AI-generated

Technical impact

This vulnerability is a use‑after‑free flaw in the Updater module of Google Chrome on Windows. It allows a local attacker to place a malicious file that is then executed with elevated privileges, giving the attacker OS‑level access. The flaw results from a corrupted reference that is freed but subsequently used, enabling privileged execution.

Affected Systems

Google Chrome browsers running on Windows that are earlier than version 149.0.7827.53 are affected. The issue resides in the updater component executed during installation and update procedures.

Risk and Exploitability

The CVSS score assigned to this flaw is 7.3, indicating a high severity. The EPSS score is reported as < 1%, implying a very low probability of exploitation in the wild. The vulnerability requires local access; an attacker must be present on the target machine or have logged‑in credentials to place the malicious file. The flaw is not listed in CISA’s KEV catalog.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Google Chrome to at least version 149.0.7827.53 on all Windows machines.
  • Ensure that Chrome Updater downloads updates only from the official, signed sources and that the updater process verifies the integrity of those updates before execution.
  • If an immediate patch cannot be applied, restrict execution permissions on the Chrome Updater directory to prevent arbitrary files from being run until the vulnerability is fixed.

Generated by OpenCVE AI on June 7, 2026 at 16:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-6325-1 chromium security update
History
Type Values Removed Values Added
First Time appeared Microsoft
Microsoft windows
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft windows
Type Values Removed Values Added
Title chromium-browser: Use after free in Updater
Weaknesses CWE-825
References
Metrics threat_severity

None

 threat_severity

Moderate
Type Values Removed Values Added
Title Use After Free in Chrome Updater Enables Local Privilege Escalation
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome
Type Values Removed Values Added
Title Use After Free in Chrome Updater Enables Local Privilege Escalation
Type Values Removed Values Added
Description Use after free in Updater in Google Chrome on Windows prior to 149.0.7827.53 allowed a local attacker to perform OS-level privilege escalation via a malicious file. (Chromium security severity: Medium)
Weaknesses CWE-416
References
Earlier changes (2)
Weaknesses

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Jun 8, 2026, 6:09 PM
Reserved
Jun 4, 2026, 5:06 PM

View source JSON

Updated
Jun 6, 2026, 3:21 AM

JSON

Status
Modified
Published
Jun 4, 2026, 11:17 PM
Modified
Jul 23, 2026, 7:10 AM

View source JSON

Severity
Moderate
Public date
Jun 2, 2026, 12:00 AM

View source Bugzilla JSON

Updated
Jun 7, 2026, 5:00 PM

JSON