CVE-2026-11174

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53

Description An inappropriate implementation in Site Isolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site Isolation is a security feature that ensures pages from different sites are put into different processes to prevent data leakage.

Recommendations Update to version 149.0.7827.53 or later.