CVE-2026-11133

The Paint component in Google Chrome and Microsoft Edge is vulnerable to a security flaw caused by a lack of mechanisms for verifying data sources and insufficient policy enforcement . A remote attacker can exploit this by using a crafted HTML page to bypass the same-origin policy and manipulate ...