cve-2026-11681

CVE-2026-11681 is a high-severity Google Chrome vulnerability disclosed on June 8, 2026, affecting Chrome on Linux before version 149.0.7827.103. The vulnerability allows a remote attacker to potentially trigger heap corruption through a crafted HTML page. The bug resides in Ozone, Chrome's platform-abstraction layer for windowing and input, making it especially relevant to Linux desktop users and enterprise fleets. A notable discrepancy exists between the NVD configuration, which lists versions up to but excluding 149.0.7827.102, and the CVE description stating the fixed threshold is 149.0.7827.103. This tag covers discussions, patching guidance, and analysis of CVE-2026-11681 for WindowsForum users.