Security Alerts
The latest Security Alerts coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2026-11647: High-Severity Chrome Android Flaw Enables Sandbox Escape via Printing
Chrome 149.0.7827.103 for Android is now rolling out with a fix for CVE-2026-11647, a use-after-free vulnerability in the browser’s Printing component that could allow a remote attacker to escape...
Chrome's Latest Sandbox Escape Flaw CVE-2026-11700 Demands Immediate Patching on Windows
A single memory safety mistake in Chrome’s tracing subsystem has handed attackers a rare and dangerous escape hatch from the browser’s most critical defense. Google disclosed CVE-2026-11700 on...
Mac Users at Risk: Google Fixes Critical Bluetooth Zero-Click Exploit in Chrome 149
Google has patched a high-severity use-after-free vulnerability in Chrome’s Bluetooth implementation on macOS, tracked as CVE-2026-11699, that could allow an attacker to execute arbitrary code...
High-Severity Bluetooth Use-After-Free Bug in Chrome for Mac Demands Immediate Patch
{ "title": "High-Severity Bluetooth Use-After-Free Bug in Chrome for Mac Demands Immediate Patch", "content": "Google has released an emergency update for Chrome on macOS to patch a high-severity...
Google Chrome Emergency Fix for CVE-2026-11697 Closes High-Severity Sandbox Escape
Google has rushed out an emergency security update for its Chrome browser to plug a high-severity sandbox escape vulnerability tracked as CVE-2026-11697. The flaw, which affects Chrome on Windows,...
Google Patches Windows-Only Chrome Video Flaw as NVD Publishes CVE-2026-11696
Google has quietly shipped a fix for a video-component vulnerability in Chrome that affects only Windows users, just as the National Vulnerability Database (NVD) published the official entry on June...
Chrome’s Password Flaw Gets an NVD CVE—But CPE Chaos Could Muddy Windows Patch Efforts
The National Vulnerability Database assigned CVE-2026-11695 on June 8, 2026, a high-severity designation for a remote attack vector targeting Google Chrome’s password manager, weeks after the...
Urgent: Google Patches Actively Exploited Chrome Use-After-Free Flaw—Here’s How Windows Admins Can Deploy the Fix
Google has released an out-of-band security update for Chrome, stamping out a high-severity use-after-free vulnerability in the browser’s ServiceWorker engine that attackers have already been...
Google Chrome 149 Patches High-Severity Site Isolation Bypass Vulnerability (CVE-2026-11693)
Google pushed out Chrome 149.0.7827.103 on June 8, 2026, to stamp out a high-severity security hole that let attackers circumvent the browser's Site Isolation defenses after compromising a renderer...
Chrome 149 Fixes High‑Severity Use‑After‑Free That Enables Windows Sandbox Escape – Update Immediately
Google has pushed an urgent update for Chrome across Windows, macOS, and Linux after confirming a high‑severity vulnerability in the browser’s Read Anything feature that could be used to escape...
Google Rushes Patch for Chrome’s Media OOB Bug on macOS (CVE-2026-11690)
Google on June 8, 2026 shipped an urgent fix for Chrome version 149.0.7827.103 on macOS, closing a high-severity out-of-bounds read and write flaw in the browser’s Media component. CVE-2026-11690,...
Chrome 149 Fixes High-Severity Cross-Origin Leak in New Tab Page (CVE-2026-11691)
Google has rolled out a critical update to Chrome 149, patching a high-severity vulnerability in the browser’s New Tab Page (NTP) that could let attackers who have already hijacked the renderer...