CVE-2026-11100
CriticalCVSS 9.6Summary
In Google Chrome on Mac prior to version 149.0.7827.53, there was a use after free vulnerability in the File Input component that could allow a remote attacker to perform a sandbox escape via a crafted HTML page if the user engaged in specific UI gestures.
Risk Assessment
This vulnerability could lead to serious security breaches, allowing attackers to gain control over the user's system.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)