[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2026-11684":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":28,"references":33,"score":36,"epss_score":37,"epss_percentile":38,"is_kev":39,"cisa_kev_date_added":40,"cisa_kev_due_date":40,"cisa_ssvc":41,"attack_mappings":51,"exploits":108},355378,"CVE-2026-11684","EUVD-2026-35210","Insufficient policy enforcement in Network in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the utility process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)","2026-06-09T00:16:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":17,"privilegesRequired":17,"confidentialityImpact":15},"UNCHANGED","3.1",3.1,"NETWORK","LOW","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:U\u002FC:L\u002FI:N\u002FA:N","NONE","REQUIRED","HIGH",true,[22],"CWE-693",[24,25,26,27],"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*","cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*","cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",[29,30,31,32],"Linux Linux Kernel","Microsoft Windows","Google Chrome","Apple Macos",[34,35],"https:\u002F\u002Fchromereleases.googleblog.com\u002F2026\u002F06\u002Fstable-channel-update-for-desktop_0153744567.html","https:\u002F\u002Fissues.chromium.org\u002Fissues\u002F517130229",0.35,0.00165,0.05432,false,null,{"timestamp":42,"automatable":43,"tech_impact":44,"exploitation":45,"cisa_decision":46,"cisa_remediation_timeline":50},"2026-06-09T01:26:18.816078Z","no","partial","none",{"vector":47,"decision":48,"priority":49},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T02:31:34.001815\u002F","track_star","medium","60D",[52,58,69,76,84,93,100],{"name":53,"source":54,"tactics":55,"technique_id":57},"Exploit Public-Facing Application","attack_vector",[56],"initial-access","T1190",{"name":59,"source":60,"cwe_ids":61,"tactics":62,"capec_ids":65,"technique_id":68},"Network Sniffing","capec",[22],[63,64],"credential-access","discovery",[66,67],"CAPEC-57","CAPEC-65","T1040",{"name":70,"source":60,"cwe_ids":71,"tactics":72,"capec_ids":73,"technique_id":75},"File and Directory Discovery",[22],[64],[74],"CAPEC-127","T1083",{"name":77,"source":60,"cwe_ids":78,"tactics":79,"capec_ids":81,"technique_id":83},"Transmitted Data Manipulation",[22],[80],"impact",[82],"CAPEC-668","T1565.002",{"name":85,"source":60,"cwe_ids":86,"tactics":87,"capec_ids":90,"technique_id":92},"Executable Installer File Permissions Weakness",[22],[88,89],"execution","stealth",[91],"CAPEC-17","T1574.005",{"name":94,"source":60,"cwe_ids":95,"tactics":96,"capec_ids":97,"technique_id":99},"Services File Permissions Weakness",[22],[88,89],[98,91],"CAPEC-1","T1574.010",{"name":101,"source":60,"cwe_ids":102,"tactics":103,"capec_ids":105,"technique_id":107},"Escape to Host",[22],[104],"privilege-escalation",[106],"CAPEC-480","T1611",[]]