CVE-2026-11693

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.103

Description An inappropriate implementation in Plugins allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a security feature that ensures pages from different sites are run in separate processes to prevent data theft.

Recommendations Update Google Chrome to version 149.0.7827.103 or later.