CVE Catalog
CVE-2026-11037
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.28%
20th percentile - higher than 20% of all known CVEs
Summary
Out-of-bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allows a remote attacker to potentially escape the sandbox via a crafted video file.
Risk Assessment
Sandbox escape could allow the attacker to execute code outside browser restrictions, posing a serious system threat.
Recommendation
Update Google Chrome to version 149.0.7827.53 or later.
Original NVD description (English source)
Out of bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)