Chromium Critical Vulnerabilities - 20260610002¶
Overview¶
The WASOC has been made aware of a use after free vulnerability in Google Chrome Navigation and an insufficient validation of untrusted input vulnerability in Google Chrome UI that allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
What is vulnerable?¶
| Products Affected | CVE | CVSS | Severity |
|---|---|---|---|
| Chromium-based Browsers - Google Chrome - Microsoft Edge - Brave - Vivaldi |
CVE-2026-11671 CVE-2026-11697 CVE-2026-11645 |
9.6 9.6 8.8 |
Critical Critical High |
What has been observed?¶
The WASOC has observed one or more of the moentioned items being listed on the CISA Known Exploited Vulnerability catalog. The WASOC has not received any reports of exploitation of this vulnerability on Western Australian Government networks at the time of writing.
Recommendation¶
The WASOC recommends administrators apply the solutions as per vendor instructions to all affected devices within expected timeframes (refer Patch Management):