cve-2026-11633

CVE-2026-11633 is a critical use-after-free vulnerability in Google Chrome's Bluetooth handling on macOS, fixed in version 149.0.7827.103. The flaw could allow a remote attacker to execute arbitrary code via a malicious Bluetooth peripheral. This vulnerability highlights the expanding attack surface of modern browsers, which now bridge web content, device APIs, and operating system trust boundaries. Discussions on WindowsForum.com examine the broader implications for browser security, particularly how such flaws signal a shift in where browser attack surfaces are evolving. While the bug is platform-specific to macOS, it serves as a warning for all users about the increasing complexity of browser-mediated device interactions.