Forwarded from National Cybersecurity Information Sharing and Analysis Center: Cybersecurity Alert NISAC-200-202606-00000006
[Content Description]
Researchers have discovered 74 high-risk security vulnerabilities (CVE-2026-11628 to CVE-2026-11701) in Chromium-based browsers such as Google Chrome, Microsoft Edge, Vivaldi, Brave, and Opera. These vulnerabilities include Use After Free and Out-of-Bounds Memory Access, among others. In the most serious cases, unauthenticated remote attackers could trick users into opening specially crafted HTML pages, thereby executing arbitrary code within the browser's sandbox environment. CVE-2026-11645 has already been exploited by hackers; please confirm and patch it as soon as possible.
[Affected Platforms]
Google Chrome versions prior to 149.0.7827.102
Microsoft Edge versions prior to 149.0.4022.62
Vivaldi versions prior to 8.0.4033.46
Brave versions prior to 1.91.171
Opera versions prior to 132.0.5905.37
[Recommended Measures]
1. Please update Google Chrome to version 149.0.7827.102 or later. https://support.google.com/chrome/answer/95414?hl=zh-Hant
2. Please update Microsoft Edge to version 149.0.4022.62 or later.
https://support.microsoft.com/zh-tw/topic/microsoft-edge-%E6%9B%B4%E6%96%B0%E8%A8%AD%E5%AE%9A-af8aaca2-1b69-4870-94fe-18822dbb7ef1
3. Please update Vivaldi browser to version 8.04033.46 or later.
https://help.vivaldi.com/desktop/install-update/update-vivaldi/
4. Please update Brave browser to version 1.91.171 or later.
https://community.brave.com/t/how-to-update-brave/384780
5. Please update Opera browser to version 132.05905.37 or later.
https://help.opera.com/en/latest/crashes-and-issues/#updateBrowser
[References]
1. https://support.google.com/chrome/answer/95414?hl=zh-Hant
2. https://support.microsoft.com/zh-tw/topic/microsoft-edge-%E6%9B%B4%E6%96%B0%E8%A8%AD%E5%AE%9A-af8aaca2-1b69-4870-94fe-18822dbb7ef1
3. https://help.vivaldi.com/desktop/install-update/update-vivaldi/
4. https://community.brave.com/t/how-to-update-brave/384780
5. https://help.opera.com/en/latest/crashes-and-issues/#updateBrowser
6. https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html
7. https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
9. https://vivaldi.com/blog/desktop/tabs-and-site-info-vivaldi-browser-snapshot-4070-3/
10. https://brave.com/latest/
11. https://blogs.opera.com/security/2026/06/update-your-browser-security-fix-for-chrome-zero-day-cve-2026-11645/