CVE-2026-11297

HighCVSS 7.7

Published: 05/06/2026(UTC)Updated: 08/06/2026(UTC)Translated: 09/06/2026(UTC)NVD NIST

Summary

Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to version 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a malicious file.

Risk Assessment

An attacker could exploit this vulnerability to perform unauthorized actions within the application, potentially leading to data leakage or other security threats.

Recommendation

It is recommended to update Google Chrome on Android to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Insufficient validation of untrusted input in Reader Mode in Google Chrome on Android prior to 149.0.7827.53 allowed a local attacker to bypass navigation restrictions via a malicious file. (Chromium security severity: Low)