Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
5 IOCs

CVE-2026-11645: Chrome Zero-Day Vulnerability Exploited in the Wild

SOC Prime
SOC Prime
Published June 9, 2026Original Report

Excerpt

Google has released emergency Chrome updates to address a Chrome zero-day vulnerability, a high-severity out-of-bounds read/write issue in the V8 JavaScript engine. Google says an exploit exists in the wild, and the patched Stable builds are rolling out as 149.0.7827.102.103 for Windows and Mac and 149.0.7827.102 for Linux . Public reporting says the flaw can be triggered through a specially crafted HTML page and may allow a remote attacker to execute arbitrary code inside…

Read the original report →

Attack Flow5 steps · MITRE ATT&CK mapped

Initial AccessTA0001T1190
1/5
Exploit Public-Facing Application
ActionExploit browser vulnerability
An attacker exploits a zero-day vulnerability (CVE-2026-11645) in the Chrome V8 JavaScript engine via a specially crafted HTML page.

Indicators of Compromise

Open the mindmap →

5 indicators

TypeIndicatorConfidenceScoreFirst Seen
CVECVE-2026-3910MediumScore 57/100First seen
CVECVE-2026-2441MediumScore 57/100First seen
CVECVE-2026-11645HighScore 61/100First seen
CVECVE-2026-5281MediumScore 57/100First seen
CVECVE-2026-3909MediumScore 57/100First seen

IOC Relationship Graph

Building graph…