CVE-2026-11656
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Use after free in ServiceWorker in Google Chrome prior to version 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension.
Risk Assessment
An attacker could gain access to the user's system, leading to serious threats to data security and privacy.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to avoid installing unknown extensions.
Original NVD description (English source)
Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: High)