CVE-2026-11131

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53

Description A use after free issue exists in the Autofill component. A remote attacker who has already compromised the renderer process can potentially achieve a sandbox escape by using a specially crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

Recommendations Update to version 149.0.7827.53 or later.