PT-2026-46566 · Google · Google Chrome

CVE-2026-11037

·

Published

2026-03-31

·

Updated

2026-08-31

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53
Description An out of bounds write occurs in Codecs, which could allow a remote attacker to potentially perform a sandbox escape by using a crafted video file. A sandbox escape is a technique used to break out of a restricted environment to gain unauthorized access to the underlying system.
Recommendations Update to version 149.0.7827.53 or later.

Fix

DoS

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-12965
CVE-2026-11037
ECHO-4458-DC35-6636
OPENSUSE-SU-2026:10958-1
OPENSUSE-SU-2026:21135-1

Affected Products

Google Chrome