Google patched CVE-2026-11645, an out-of-bounds memory access bug in Chrome's V8 JavaScript engine exploited in the wild. The company awarded a $55,000 bounty to researcher 303f06e3. This is the fifth actively exploited Chrome zero-day fixed in 2026, compared to eight total in 2025.
Tap to vote and see what everyone thinks.
Check Point fixes VPN zero-day exploited since May 7
Summary by ByteBrief