Story perspectives

Google Patches Critical Chrome Zero-Day Exploit

6/10/2026

30 4

Summary

Story summary

Google released Chrome updates 149.0.7827.102/.103 for Windows/macOS and 149.0.7827.102 for Linux to patch zero-day CVE-2026-11645 after confirming active exploitation.
The vulnerability is an out-of-bounds memory access in the V8 JavaScript engine with a CVSS severity of 8.8.
Researcher “303f06e3” reported the issue on April 27 2026 and received a $55,000 bounty.
Google advises users to restart Chrome, install the update, and apply similar fixes to other Chromium-based browsers.

1 of 1

Story summary

Google released Chrome updates 149.0.7827.102/.103 for Windows/macOS and 149.0.7827.102 for Linux to patch zero-day CVE-2026-11645 after confirming active exploitation.
The vulnerability is an out-of-bounds memory access in the V8 JavaScript engine with a CVSS severity of 8.8.
Researcher “303f06e3” reported the issue on April 27 2026 and received a $55,000 bounty.
Google advises users to restart Chrome, install the update, and apply similar fixes to other Chromium-based browsers.