Description
Use after free in Bluetooth in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
Published: 2026-06-08
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A use‑after‑free flaw (CWE‑416) combined with an incorrectly initialized variable issue (CWE‑825) in Google Chrome’s Bluetooth implementation on Windows allows a remote attacker who manages to convince a user to perform specific UI gestures to execute arbitrary code by loading a specially crafted HTML page. The vulnerability is a high severity issue that can give the attacker full control of the affected machine.

Affected Systems

Google Chrome for Windows versions prior to 149.0.7827.103 are affected. Users running Chrome built from Chromium sources before this revision also fall into this risk zone.

Risk and Exploitability

The EPSS score is 0.00128 (about 0.13%) and the flaw is not listed in CISA’s KEV catalog, but the CVSS score is 7.5, indicating high severity. Exploitation requires the victim to view a malicious web page and interact with the browser’s UI, making the attack dependent on user cooperation but still remotely deliverable via the web. Once triggered, the attacker can run arbitrary code with the privileges of the Chrome user.

Generated by OpenCVE AI on June 11, 2026 at 01:57 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade Google Chrome to version 149.0.7827.103 or later.
  • If upgrading is not immediately possible, disable the Bluetooth functionality on the affected Windows machine to prevent the use‑after‑free path.
  • Avoid opening or interacting with untrusted web pages on Windows Chrome installations until a patch is applied.

Generated by OpenCVE AI on June 11, 2026 at 01:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6337-1 chromium security update
History

Thu, 11 Jun 2026 00:15:00 +0000

Type Values Removed Values Added
Title chromium-browser: Use after free in Bluetooth
Weaknesses CWE-825
References
Metrics threat_severity

None

 threat_severity

Important

Tue, 09 Jun 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft
Microsoft windows
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft windows

Tue, 09 Jun 2026 03:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Bluetooth Enables Remote Code Execution via Crafted Page

Tue, 09 Jun 2026 01:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 09 Jun 2026 01:15:00 +0000

Type Values Removed Values Added
Title Use‑After‑Free in Chrome Bluetooth Enables Remote Code Execution via Crafted Page

Tue, 09 Jun 2026 00:45:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Mon, 08 Jun 2026 23:45:00 +0000

Type Values Removed Values Added
Description Use after free in Bluetooth in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: Critical)
Weaknesses CWE-416
References

Subscriptions

Google Chrome
Microsoft Windows
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-06-09T03:55:51.712Z

Reserved: 2026-06-08T21:33:36.489Z

Link: CVE-2026-11641

cve-icon Vulnrichment

Updated: 2026-06-09T01:07:37.822Z

cve-icon NVD

Status : Analyzed

Published: 2026-06-09T00:16:46.837

Modified: 2026-06-09T20:30:45.200

Link: CVE-2026-11641

cve-icon Redhat

Severity : Important

Publid Date: 2026-06-08T00:00:00Z

Links: CVE-2026-11641 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-06-11T02:00:16Z

Weaknesses