CVE Catalog
CVE-2026-11659
CriticalCVSS 9.6Exploitation Probability (EPSS)
Low risk0.25%
17th percentile - higher than 17% of all known CVEs
Summary
Google Chrome on Linux prior to version 149.0.7827.103 has an integer overflow vulnerability in the UI component. A remote attacker can use a crafted HTML page to potentially perform a sandbox escape.
Risk Assessment
An attacker can escape the browser sandbox and gain access to the operating system, enabling arbitrary code execution on the victim's machine.
Recommendation
Update Google Chrome on Linux to version 149.0.7827.103 or later.
Original NVD description (English source)
Integer overflow in UI in Google Chrome on Linux prior to 149.0.7827.103 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)