CVE Catalog
CVE-2026-11052
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.26%
17th percentile - higher than 17% of all known CVEs
Summary
Google Chrome on Windows prior to version 149.0.7827.53 has a type confusion vulnerability in the GPU component. A remote attacker who has compromised the renderer process can use a crafted HTML page to potentially perform a sandbox escape.
Risk Assessment
An attacker can escape the browser sandbox and gain access to the operating system, enabling arbitrary code execution on the victim's machine.
Recommendation
Update Google Chrome on Windows to version 149.0.7827.53 or later.
Original NVD description (English source)
Type Confusion in GPU in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)