Chromium: CVE-2026-11078 Insufficient validation of untrusted input in FileSystem

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Linux Distros Unpatched Vulnerability : CVE-2026-11078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass...

CVE-2026-11078

Google Chrome and Microsoft Edge (Chromium-based) are vulnerable due to insufficient validation of input data within the FileSystem component. An attacker who has already compromised the renderer process can exploit this flaw to bypass the same-origin policy using a specially crafted HTML page. T...

CVE-2026-11078

Inappropriate implementation in FileSystem in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...