CVE-2026-11153
Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.1
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- EPSS probability
- 0.26%
- CWE
- CWE-1300
- Published
- 2026-06-04
- Last modified
- 2026-06-05
Affected products
- Google Chrome
Weakness type
Related vulnerabilities
- CVE-2026-18019 — Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote...
- CVE-2026-17978 — Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a...
- CVE-2026-17942 — Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote...
- CVE-2026-17914 — Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote...
- CVE-2026-17907 — Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a...
- CVE-2026-17859 — Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed a remote...
- CVE-2026-17851 — Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a...
- CVE-2026-17802 — Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed...