PT-2026-46801

CVE-2026-11274

Published

2026-06-04

Updated

2026-08-31

Description by

CVSS 3.1

4.3

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 149.0.7827.53

Description An inappropriate implementation in DOM Distiller allows a remote attacker to bypass navigation restrictions by using a crafted HTML page. DOM Distiller is a feature that simplifies web pages for easier reading by removing unnecessary content.

Recommendations Update to version 149.0.7827.53 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-284: Improper Access Control

Related identifiers

CVE-2026-11274

ECHO-28AA-3B80-4AD6

OPENSUSE-SU-2026:10958-1