CVE-2026-11190

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53

Description An inappropriate implementation in Extensions allows an attacker to bypass discretionary access control—a type of security mechanism that restricts access to objects based on the identity of users or groups—by using a crafted Chrome Extension, provided they can convince a user to install the malicious extension.

Recommendations Update to version 149.0.7827.53 or later.