Dossier
out-of-bounds memory access
Coverage of out-of-bounds memory access in the Nexus archive.
- Chrome's zero-day Whac-A-Mole continues with fifth exploited bug of the year
Google patched the fifth actively exploited Chrome zero-day of 2026, CVE-2026-11645, an out-of-bounds memory access flaw in the V8 JavaScript engine. The vulnerability was reported by researcher '303f06e3' and earned a $55,000 bounty, with technical details withheld to prevent further exploitation.