CVE Catalog
CVE-2026-11047
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.30%
22th percentile - higher than 22% of all known CVEs
Summary
Inappropriate implementation in Base in Google Chrome on Windows (before 149.0.7827.53) allows a remote attacker who compromised the renderer to potentially escape the sandbox via a crafted HTML page.
Risk Assessment
An attacker can escape the browser sandbox and gain access to the operating system, posing a medium risk.
Recommendation
Update Google Chrome to version 149.0.7827.53 or later.
Original NVD description (English source)
Inappropriate implementation in Base in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)