CVE-2026-11157

Google Chrome (Desktop)—UXSS in Accessibility prior to 149.0.7827.53: an attacker convincing a user to install a malicious extension could inject arbitrary scripts/HTML via the crafted extension. Root cause: script injection in the Accessibility path. Impact: arbitrary script execution within the...