CVE-2026-11695

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-11189

Insufficient validation of untrusted input in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2026-11110

A vulnerability in the ANGLE component of Google Chrome and Microsoft Edge allows a remote attacker to leak cross-origin data via a crafted HTML page. The root cause is the use of uninitialized variables during initialization. The vulnerability has been fixed in version 149.0.7827.53 and later. F...