cve-2026-11669

CVE-2026-11669 is a high-severity Chromium Media vulnerability patched in the Chrome 149 stable update released on June 8, 2026. The flaw affects Chrome on ChromeOS prior to version 149.0.7827.103 and could allow an attacker to expose process memory via a crafted HTML page after compromising the renderer. Google's advisory describes the issue as an integer overflow in Media, while the NVD entry characterizes the consequence as an out-of-bounds read. This discrepancy is not contradictory but highlights how CVE records often describe the security impact while vendor advisories summarize the underlying bug class. Security teams should ensure Chrome is updated to the latest version to mitigate this vulnerability.