CVE-2026-11140

Google Chrome and Microsoft Edge (Chromium-based) are vulnerable to an out-of-bounds read in the Chromecast component due to insufficient validation of input data . A remote attacker who has already compromised the renderer process can use a crafted HTML page to extract potentially sensitive info...