Is CVE-2026-11645 in the CISA Known Exploited Vulnerabilities catalog?

CVE-2026-11645 is not currently listed in the CISA KEV catalog.

Vulnerability intelligence

CVE-2026-11645: Chrome V8 out-of-bounds read and write

CVE-2026-11645 is an out-of-bounds read/write in Chrome's JavaScript engine. Astro ships 9KB of JS. Next.js ships 463KB. The attack surface isn't equal.

2026

What WebPulse reported · 1 analysis

Chrome V8 Has an Actively Exploited RCE. Your Framework Decides How Much V8 Your Users Run.

CVE-2026-11645 is an out-of-bounds read/write in Chrome's JavaScript engine. Astro ships 9KB of JS. Next.js ships 463KB. The attack surface isn't equal.

June 11, 2026

View CVE-2026-11645 on the NIST National Vulnerability Database →

Related vulnerabilities

CVE-2026-9082 CVE-2026-60137 CVE-2026-50549 CVE-2026-50548 CVE-2026-8206 CVE-2026-8181 CVE-2026-63030 CVE-2026-10795