# Google Chrome (EXE) 149.0.7827.103

Google Chrome (EXE) 149.0.7827.103, released June 6, 2026, fixes 51 CVEs in Google Chrome (EXE). One of them is being exploited (CVE-2026-11645); 1 on CISA KEV. Patch Radar priority: Patch now. The latest Google Chrome (EXE) is 157.0.8103.51, which also fixes every one of these CVEs.

- Web page: https://patchblox.com/security/fix/windows-app/google.chrome.exe-149.0.7827.103
- Platform: Windows apps
- Released: Jun 6, 2026
- Priority: Patch now (Closes CVE-2026-11645, exploited (CISA KEV))
- CVEs: 51, exploited: 1, on CISA KEV: 1
- Superseded by: [Google Chrome (EXE) 157.0.8103.51](https://patchblox.com/security/data/product/windows-app/google-chrome-exe.md), the latest version, which also fixes every CVE listed here

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Google Chrome (EXE)](https://patchblox.com/security/data/product/windows-app/google-chrome-exe.md) |  | 149.0.7827.103 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2026-11645](https://patchblox.com/security/data/cve/CVE-2026-11645.md) | Patch now | Chromium: CVE-2026-11645 Out of bounds memory access in V8 | 8.8 | 0.0244 | CISA KEV |
| [CVE-2026-11651](https://patchblox.com/security/data/cve/CVE-2026-11651.md) | Urgent | Chromium: CVE-2026-11651 Use after free in Network | 9.6 | 0.0034 |  |
| [CVE-2026-11634](https://patchblox.com/security/data/cve/CVE-2026-11634.md) | Urgent | Chromium: CVE-2026-11634 Use after free in Gamepad | 9.6 | 0.0025 |  |
| [CVE-2026-11638](https://patchblox.com/security/data/cve/CVE-2026-11638.md) | Urgent | Chromium: CVE-2026-11638 Use after free in Printing | 9.6 | 0.0025 |  |
| [CVE-2026-11671](https://patchblox.com/security/data/cve/CVE-2026-11671.md) | Urgent | Chromium: CVE-2026-11671 Use after free in Navigation | 9.6 | 0.0024 |  |
| [CVE-2026-11663](https://patchblox.com/security/data/cve/CVE-2026-11663.md) | Urgent | Chromium: CVE-2026-11663 Use after free in Skia | 9.6 | 0.0023 |  |
| [CVE-2026-11675](https://patchblox.com/security/data/cve/CVE-2026-11675.md) | Urgent | Chromium: CVE-2026-11675 Insufficient validation of untrusted input in Skia | 9.6 | 0.0021 |  |
| [CVE-2026-11697](https://patchblox.com/security/data/cve/CVE-2026-11697.md) | Urgent | Chromium: CVE-2026-11697 Insufficient validation of untrusted input in UI | 9.6 | 0.0020 |  |
| [CVE-2026-11662](https://patchblox.com/security/data/cve/CVE-2026-11662.md) | High | Chromium: CVE-2026-11662 Type Confusion in Bindings | 8.8 | 0.0036 |  |
| [CVE-2026-11649](https://patchblox.com/security/data/cve/CVE-2026-11649.md) | High | Chromium: CVE-2026-11649 Use after free in V8 | 8.8 | 0.0031 |  |
| [CVE-2026-11650](https://patchblox.com/security/data/cve/CVE-2026-11650.md) | High | Chromium: CVE-2026-11650 Use after free in V8 | 8.8 | 0.0031 |  |
| [CVE-2026-11683](https://patchblox.com/security/data/cve/CVE-2026-11683.md) | High | Chromium: CVE-2026-11683 Use after free in WebCodecs | 8.8 | 0.0031 |  |
| [CVE-2026-11641](https://patchblox.com/security/data/cve/CVE-2026-11641.md) | High | Chromium: CVE-2026-11641 Use after free in Bluetooth | 7.5 | 0.0028 |  |
| [CVE-2026-11643](https://patchblox.com/security/data/cve/CVE-2026-11643.md) | High | Chromium: CVE-2026-11643 Use after free in Proxy | 8.1 | 0.0027 |  |
| [CVE-2026-11629](https://patchblox.com/security/data/cve/CVE-2026-11629.md) | High | Chromium: CVE-2026-11629 Use after free in Ozone | 8.8 | 0.0027 |  |
| [CVE-2026-11632](https://patchblox.com/security/data/cve/CVE-2026-11632.md) | High | Chromium: CVE-2026-11632 Use after free in TabStrip | 7.5 | 0.0026 |  |
| [CVE-2026-11648](https://patchblox.com/security/data/cve/CVE-2026-11648.md) | High | Chromium: CVE-2026-11648 Use after free in FullScreen | 8.8 | 0.0026 |  |
| [CVE-2026-11646](https://patchblox.com/security/data/cve/CVE-2026-11646.md) | High | Chromium: CVE-2026-11646 Use after free in ViewTransitions | 8.8 | 0.0026 |  |
| [CVE-2026-11660](https://patchblox.com/security/data/cve/CVE-2026-11660.md) | High | Chromium: CVE-2026-11660 Insufficient validation of untrusted input in New Tab Page | 8.3 | 0.0026 |  |
| [CVE-2026-11688](https://patchblox.com/security/data/cve/CVE-2026-11688.md) | High | Chromium: CVE-2026-11688 Object lifecycle issue in SVG | 8.8 | 0.0026 |  |
| [CVE-2026-11630](https://patchblox.com/security/data/cve/CVE-2026-11630.md) | High | Chromium: CVE-2026-11630 Use after free in File Input | 8.8 | 0.0025 |  |
| [CVE-2026-11664](https://patchblox.com/security/data/cve/CVE-2026-11664.md) | High | Chromium: CVE-2026-11664 Use after free in Payments | 8.8 | 0.0025 |  |
| [CVE-2026-11673](https://patchblox.com/security/data/cve/CVE-2026-11673.md) | High | Chromium: CVE-2026-11673 Use after free in InterestGroups | 8.8 | 0.0024 |  |
| [CVE-2026-11674](https://patchblox.com/security/data/cve/CVE-2026-11674.md) | High | Chromium: CVE-2026-11674 Use after free in Guest View | 8.8 | 0.0024 |  |
| [CVE-2026-11680](https://patchblox.com/security/data/cve/CVE-2026-11680.md) | High | Chromium: CVE-2026-11680 Use after free in Media | 8.8 | 0.0024 |  |
| [CVE-2026-11652](https://patchblox.com/security/data/cve/CVE-2026-11652.md) | High | Chromium: CVE-2026-11652 Use after free in Extensions | 8.3 | 0.0024 |  |
| [CVE-2026-11661](https://patchblox.com/security/data/cve/CVE-2026-11661.md) | High | Chromium: CVE-2026-11661 Use after free in Views | 8.3 | 0.0024 |  |
| [CVE-2026-11640](https://patchblox.com/security/data/cve/CVE-2026-11640.md) | High | Chromium: CVE-2026-11640 Integer overflow in libyuv | 8.3 | 0.0023 |  |
| [CVE-2026-11642](https://patchblox.com/security/data/cve/CVE-2026-11642.md) | High | Chromium: CVE-2026-11642 Use after free in Web Apps | 8.3 | 0.0023 |  |
| [CVE-2026-11670](https://patchblox.com/security/data/cve/CVE-2026-11670.md) | High | Chromium: CVE-2026-11670 Use after free in PDF | 8.8 | 0.0022 |  |
| [CVE-2026-11631](https://patchblox.com/security/data/cve/CVE-2026-11631.md) | High | Chromium: CVE-2026-11631 Use after free in Aura | 8.3 | 0.0022 |  |
| [CVE-2026-11636](https://patchblox.com/security/data/cve/CVE-2026-11636.md) | High | Chromium: CVE-2026-11636 Use after free in Autofill | 7.5 | 0.0022 |  |
| [CVE-2026-11689](https://patchblox.com/security/data/cve/CVE-2026-11689.md) | High | Chromium: CVE-2026-11689 Insufficient validation of untrusted input in Passwords | 8.1 | 0.0022 |  |
| [CVE-2026-11667](https://patchblox.com/security/data/cve/CVE-2026-11667.md) | High | Chromium: CVE-2026-11667 Out of bounds read in WebRTC | 7.5 | 0.0022 |  |
| [CVE-2026-11694](https://patchblox.com/security/data/cve/CVE-2026-11694.md) | High | Chromium: CVE-2026-11694 Use after free in ServiceWorker | 7.5 | 0.0021 |  |
| [CVE-2026-11693](https://patchblox.com/security/data/cve/CVE-2026-11693.md) | High | Chromium: CVE-2026-11693 Inappropriate implementation in Plugins | 8.1 | 0.0018 |  |
| [CVE-2026-11679](https://patchblox.com/security/data/cve/CVE-2026-11679.md) | High | Chromium: CVE-2026-11679 Use after free in Codecs | 8.3 | 0.0018 |  |
| [CVE-2026-11692](https://patchblox.com/security/data/cve/CVE-2026-11692.md) | High | Chromium: CVE-2026-11692 Use after free in Read Anything | 8.3 | 0.0018 |  |
| [CVE-2026-11700](https://patchblox.com/security/data/cve/CVE-2026-11700.md) | High | Chromium: CVE-2026-11700 Use after free in Tracing | 8.3 | 0.0018 |  |
| [CVE-2026-11656](https://patchblox.com/security/data/cve/CVE-2026-11656.md) | High | Chromium: CVE-2026-11656 Use after free in ServiceWorker | 8.3 | 0.0017 |  |
| [CVE-2026-11653](https://patchblox.com/security/data/cve/CVE-2026-11653.md) | Routine | Chromium: CVE-2026-11653 Insufficient validation of untrusted input in Extensions | 6.5 | 0.0023 |  |
| [CVE-2026-11658](https://patchblox.com/security/data/cve/CVE-2026-11658.md) | Routine | Chromium: CVE-2026-11658 Insufficient validation of untrusted input in Extensions | 6.5 | 0.0023 |  |
| [CVE-2026-11665](https://patchblox.com/security/data/cve/CVE-2026-11665.md) | Routine | Chromium: CVE-2026-11665 Out of bounds read in Dawn | 4.3 | 0.0022 |  |
| [CVE-2026-11666](https://patchblox.com/security/data/cve/CVE-2026-11666.md) | Routine | Chromium: CVE-2026-11666 Insufficient validation of untrusted input in Input | 5.4 | 0.0021 |  |
| [CVE-2026-11696](https://patchblox.com/security/data/cve/CVE-2026-11696.md) | Routine | Chromium: CVE-2026-11696 Uninitialized Use in Video | 5.3 | 0.0019 |  |
| [CVE-2026-11628](https://patchblox.com/security/data/cve/CVE-2026-11628.md) | Routine | Chromium: CVE-2026-11628 Use after free in Ozone | 6.8 | 0.0018 |  |
| [CVE-2026-11701](https://patchblox.com/security/data/cve/CVE-2026-11701.md) | Routine | Chromium: CVE-2026-11701 Insufficient validation of untrusted input in Guest View | 5.4 | 0.0018 |  |
| [CVE-2026-11678](https://patchblox.com/security/data/cve/CVE-2026-11678.md) | Routine | Chromium: CVE-2026-11678 Integer overflow in libyuv | 5.3 | 0.0018 |  |
| [CVE-2026-11695](https://patchblox.com/security/data/cve/CVE-2026-11695.md) | Routine | Chromium: CVE-2026-11695 Inappropriate implementation in Passwords | 4.3 | 0.0018 |  |
| [CVE-2026-11691](https://patchblox.com/security/data/cve/CVE-2026-11691.md) | Routine | Chromium: CVE-2026-11691 Insufficient validation of untrusted input in New Tab Page | 3.1 | 0.0017 |  |
| [CVE-2026-11684](https://patchblox.com/security/data/cve/CVE-2026-11684.md) | Routine | Chromium: CVE-2026-11684 Insufficient policy enforcement in Network | 3.1 | 0.0017 |  |

---

Data as of 2026-11-11T19:49:26Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.
