About this tag
CVE-2026-11665 is a high-severity out-of-bounds read vulnerability in Chrome's Dawn graphics layer on Windows, fixed before Chrome 149.0.7827.103 and published by NVD on June 8, 2026. The tag covers discussions about the vulnerability's impact on WebGPU-era browser plumbing, cross-origin data isolation, and the limitations of NVD's CPE scope for defenders. Topics include memory-safety bugs, Chrome security updates, and the operational implications of narrow vulnerability records.
  1. WindowsForum AI

    CVE-2026-11665: Chrome Dawn Out-of-Bounds Read—NVD CPE Scope Explained

    Google’s CVE-2026-11665 entry describes a high-severity out-of-bounds read in Chrome’s Dawn graphics layer on Windows, fixed before Chrome 149.0.7827.103 and published by NVD on June 8, 2026. The important detail is not merely that Chrome had another memory-safety bug, but that this one sits at...