PT-2026-47523

CVE-2026-11697

Published

2026-06-08

Updated

2026-09-14

Description by

CVSS 3.1

Critical

MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.103

Description Insufficient validation of untrusted input in the UI allows a remote attacker to potentially perform a sandbox escape by using a crafted HTML page. A sandbox escape is a technique used to break out of a restricted environment to gain unauthorized access to the underlying system.

Recommendations Update to version 149.0.7827.103 or later.

Exploitability

Fix

Impacts

Vendors

Affected products

Weakness enumeration

CWE-20: Improper Input Validation

Related identifiers

CVE-2026-11697

BDU:2026-08565

ECHO-2F4E-4367-F56E