CVE Catalog
CVE-2026-11152
CriticalCVSS 9.6Summary
Object lifecycle issue in Dawn in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Risk Assessment
An attacker could exploit this vulnerability to gain control over the user's system, posing a risk to the organization's data security.
Recommendation
It is recommended to update Google Chrome to version 149.0.7827.53 or later to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)