CVE-2026-11161

A vulnerability exists in the DataTransfer component of Google Chrome (and Microsoft Edge ) prior to version 149.0.7827.53 . The issue stems from a lack of mechanisms for verifying the source of data , which could allow a remote attacker to leak cross-origin data via a specially crafted HTML page...