Description
Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a malicious peripheral. (Chromium security severity: Critical)
Published: 2026-06-08
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is a use‑after‑free flaw in the Bluetooth handling code of Google Chrome on macOS. An attacker can trigger the fault by presenting a specially crafted peripheral to the browser, causing the program to access freed memory and execute arbitrary code. Chromium rated the issue as critical, and the flaw threatens confidentiality, integrity, and availability for any user who has Chrome running with Bluetooth enabled.

Affected Systems

Google Chrome on macOS versions prior to 149.0.7827.103 are affected. Any Mac system that runs an impacted Chrome build with Bluetooth connections enabled is vulnerable. Versions 149.0.7827.103 and later include the fix.

Risk and Exploitability

The exploit requires a malicious Bluetooth peripheral in proximity and the victim to have Chrome listening for devices. Although the EPSS score is not available and the vulnerability is not listed in KEV, its CVSS score of 8.8 and the local‑range attack vector suggest a high likelihood of exploitation. Because the condition for execution is proximity to a Bluetooth device and no defensive filtering is available, the risk remains high.

Generated by OpenCVE AI on June 9, 2026 at 02:56 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Chrome to version 149.0.7827.103 or later to receive the fixed build.
  • If Bluetooth is not required, disable or turn it off in macOS to prevent the attacker from delivering the malicious signal.
  • Regularly check Chrome release notes and macOS update channels for new security patches to maintain protection.

Generated by OpenCVE AI on June 9, 2026 at 02:56 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 09 Jun 2026 17:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos

Tue, 09 Jun 2026 03:15:00 +0000

Type Values Removed Values Added
Title Chromium Use‑After‑Free in Bluetooth Enables Remote Code Execution on macOS

Tue, 09 Jun 2026 01:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 09 Jun 2026 00:45:00 +0000

Type Values Removed Values Added
Title Chromium Use‑After‑Free in Bluetooth Enables Remote Code Execution on macOS
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Mon, 08 Jun 2026 23:45:00 +0000

Type Values Removed Values Added
Description Use after free in Bluetooth in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code via a malicious peripheral. (Chromium security severity: Critical)
Weaknesses CWE-416
References

Subscriptions

Apple Macos
Google Chrome
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-06-09T03:55:54.967Z

Reserved: 2026-06-08T21:33:33.494Z

Link: CVE-2026-11633

cve-icon Vulnrichment

Updated: 2026-06-09T01:10:38.147Z

cve-icon NVD

Status : Analyzed

Published: 2026-06-09T00:16:45.873

Modified: 2026-06-09T16:57:07.747

Link: CVE-2026-11633

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-09T03:00:14Z

Weaknesses