Description
Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the GPU process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Published: 2026-06-08
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is an out‑of‑bounds read in the WebRTC component of Google Chrome. The bug exists only when an attacker has already compromised the GPU process, after which a specially crafted HTML page can trigger heap corruption. This weakness is classified as CWE‑125.

Affected Systems

Users running Google Chrome on desktop operating systems with any version earlier than 149.0.7827.103 are affected. The flaw resides in the WebRTC implementation that interacts with the GPU process. Upgrading to Chrome 149.0.7827.103 or later includes the patch.

Risk and Exploitability

Chromium lists the severity as High, and the CVSS score is 7.5. The EPSS score is unavailable and the vulnerability is not in the CISA KEV catalog. Exploitation requires dual conditions: prior compromise of the GPU process and the delivery of a crafted HTML document. In environments where the GPU process can be compromised or is exposed to untrusted content, the risk is moderate to high. Updating to a fixed release mitigates the threat.

Generated by OpenCVE AI on June 9, 2026 at 12:52 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Chrome update to version 149.0.7827.103 or newer
  • If an update cannot be applied, disable GPU hardware acceleration in Chrome to remove the GPU process privilege
  • Enable site isolation or enforce same‑site isolation to limit cross‑origin GPU memory access

Generated by OpenCVE AI on June 9, 2026 at 12:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 09 Jun 2026 15:00:00 +0000

Type Values Removed Values Added
First Time appeared Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*
Vendors & Products Apple
Apple macos
Linux
Linux linux Kernel
Microsoft
Microsoft windows

Tue, 09 Jun 2026 13:15:00 +0000

Type Values Removed Values Added
Title Chrome WebRTC Out‑of‑Bounds Read Exploits Heap Corruption for GPU Process Compromise

Tue, 09 Jun 2026 11:30:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Tue, 09 Jun 2026 01:30:00 +0000

Type Values Removed Values Added
Title Chrome WebRTC Out‑of‑Bounds Read Exploits Heap Corruption for GPU Process Compromise

Tue, 09 Jun 2026 01:00:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Mon, 08 Jun 2026 23:45:00 +0000

Type Values Removed Values Added
Description Out of bounds read in WebRTC in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the GPU process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Weaknesses CWE-125
References

Subscriptions

Apple Macos
Google Chrome
Linux Linux Kernel
Microsoft Windows
cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-06-09T10:30:10.529Z

Reserved: 2026-06-08T21:33:46.090Z

Link: CVE-2026-11667

cve-icon Vulnrichment

Updated: 2026-06-09T10:30:06.521Z

cve-icon NVD

Status : Analyzed

Published: 2026-06-09T00:16:49.853

Modified: 2026-06-09T14:53:38.863

Link: CVE-2026-11667

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-06-09T13:00:05Z

Weaknesses