Chromium: CVE-2026-11181 Inappropriate implementation in Media Session

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

The vulnerability of the Media Session application interface for Google Chrome and Microsoft Edge browsers allows a perpetrator to execute arbitrary code.

The vulnerability of the Media Session application interface in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by loading a specially created malicious HTML page...