CVE-2026-11258

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53

Description An inappropriate implementation in File System Access allows a remote attacker to bypass discretionary access control, which is a type of security mechanism that restricts access to objects based on the identity of users or groups. This is achieved by convincing a user to perform specific UI gestures while interacting with a crafted HTML page.

Recommendations Update to version 149.0.7827.53 or later.