cve-2026-11657

  1. CVE-2026-11657: Chrome macOS Payments Use-After-Free—Update to 149.0.7827.103

    Google assigned CVE-2026-11657 to a high-severity use-after-free flaw in Chrome’s Payments component on macOS, fixed in Chrome 149.0.7827.103 after disclosure on June 8, 2026, with NVD and CISA-ADP describing a crafted HTML page as the remote attack path. The short version is simple: Mac users...