CVE-2026-11056

Google Chrome on Windows versions prior to 149.0.7827.53 is vulnerable to a sandbox escape due to insufficient validation of untrusted input within the SiteIsolation component. A remote attacker who has already compromised the renderer process can exploit this flaw by serving a crafted HTML page ...