CVE-2026-11182

An inappropriate implementation in the SVG component of Google Chrome (and Microsoft Edge ) prior to version 149.0.7827.53 allows a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability, which has a Medium severity, allows for the disclosure of confidential informat...