PT-2026-46739

CVE-2026-11213

·

Published

2026-04-28

·

Updated

2026-09-15

Description by

CVSS 3.1
10
Critical
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Microsoft Edge (affected versions not specified)
Description Insufficient validation of untrusted input in Reading Mode allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. A sandbox escape is a technique used to break out of a restricted environment to gain unauthorized access to the rest of the system.
Recommendations Update to version 149.0.7827.53 or later.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
ECHO-D7B4-C513-364B
OPENSUSE-SU-2026:10958-1
OPENSUSE-SU-2026:21135-1
Found an issue in the description? Have something to add? Feel free to write us 👾