# CVE-2026-11684: Chromium: CVE-2026-11684 Insufficient policy enforcement in Network

CVE-2026-11684 is fixed in 9 products on 3 platforms, first by Google Chrome Dev (EXE) 150.0.7828.2, released May 6, 2026. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2026-11684
- Priority: Routine
- CVSS: 3.1 (low)
- EPSS: 0.0017
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jun 9, 2026
- Weakness: CWE-693: Protection Mechanism Failure
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11684

## Description

<p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p>

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | Google Chrome (EXE) | 149.0.7827.103 | [Google Chrome (EXE) 149.0.7827.103](https://patchblox.com/security/data/fix/windows-app/google.chrome.exe-149.0.7827.103.md) | Jun 6, 2026 |
| Windows apps | Google Chrome Beta (EXE) | 150.0.7871.4 | [Google Chrome Beta (EXE) 150.0.7871.4](https://patchblox.com/security/data/fix/windows-app/google.chrome.beta.exe-150.0.7871.4.md) | Jun 3, 2026 |
| Windows apps | Google Chrome Dev (EXE) | 150.0.7828.2 | [Google Chrome Dev (EXE) 150.0.7828.2](https://patchblox.com/security/data/fix/windows-app/google.chrome.dev.exe-150.0.7828.2.md) | May 6, 2026 |
| Windows apps | Microsoft Edge | 149.0.4022.62 | [Microsoft Edge 149.0.4022.62](https://patchblox.com/security/data/fix/windows-app/microsoft.edge-149.0.4022.62.md) | Jun 9, 2026 |
| Windows apps | Microsoft Edge Beta | 151.0.4129.59 | [Microsoft Edge Beta 151.0.4129.59](https://patchblox.com/security/data/fix/windows-app/microsoft.edge.beta-151.0.4129.59.md) | Jul 31, 2026 |
| Windows apps | Microsoft Edge Dev | 152.0.4167.0 | [Microsoft Edge Dev 152.0.4167.0](https://patchblox.com/security/data/fix/windows-app/microsoft.edge.dev-152.0.4167.0.md) | Jul 20, 2026 |
| Windows apps | Microsoft Edge WebView2 Runtime | 149.0.4022.62 | [Microsoft Edge WebView2 Runtime 149.0.4022.62](https://patchblox.com/security/data/fix/windows-app/microsoft.edgewebview2runtime-149.0.4022.62.md) | Jun 9, 2026 |
| macOS | Google Chrome | 149.0.7827.156 | [Google Chrome 149.0.7827.156](https://patchblox.com/security/data/fix/macos/com.google.chrome-149.0.7827.156.md) | Jun 16, 2026 |
| macOS | Microsoft Edge | 149.0.4022.80 | [Microsoft Edge 149.0.4022.80](https://patchblox.com/security/data/fix/macos/com.microsoft.edgemac-149.0.4022.80.md) | Jun 17, 2026 |
| Linux | chromium Debian 12.15 (bookworm) | 149.0.7827.102-1~deb12u1 | [DEBIAN-CVE-2026-11684](https://patchblox.com/security/data/fix/linux/debian-cve-2026-11684.md) | Jun 24, 2026 |
| Linux | chromium Debian 13.5 (trixie) | 149.0.7827.102-1~deb13u1 | [DEBIAN-CVE-2026-11684](https://patchblox.com/security/data/fix/linux/debian-cve-2026-11684.md) | Jun 24, 2026 |
| Linux | chromium Debian 14 | 149.0.7827.102-1 | [DEBIAN-CVE-2026-11684](https://patchblox.com/security/data/fix/linux/debian-cve-2026-11684.md) | Jun 24, 2026 |
| Linux | chromium opensuse-leap 16.0 | 149.0.7827.155-bp160.1.1 | [OPENSUSE-SU-2026:21135-1](https://patchblox.com/security/data/fix/linux/opensuse-su-2026-21135-1.md) | Aug 31, 2026 |

---

Data as of 2026-11-07T06:34:28Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo