PT-2026-46739
CVE-2026-11213
·
Published
2026-04-28
·
Updated
2026-09-15
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 149.0.7827.53
Microsoft Edge (affected versions not specified)
Description
Insufficient validation of untrusted input in Reading Mode allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. A sandbox escape is a technique used to break out of a restricted environment to gain unauthorized access to the rest of the system.
Recommendations
Update to version 149.0.7827.53 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾