Chromium: CVE-2026-11134 Insufficient data validation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-11134

A vulnerability exists in the Media component of Google Chrome (and potentially Microsoft Edge as a Chromium-based browser) prior to version 149.0.7827.53 . The root cause is an inappropriate implementation that allows a remote attacker to leak cross-origin data by hosting a crafted HTML page. Ex...