PT-2026-46584 · Google · Google Chrome

CVE-2026-11056 · Published 2026-06-02 · Updated 2026-07-23

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53

Description Insufficient validation of untrusted input in SiteIsolation allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Sandbox escape refers to a process where an attacker breaks out of the restricted environment designed to isolate the browser process from the rest of the system.

Recommendations Update to version 149.0.7827.53 or later.

Fix

DoS

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2026-11056

ECHO-7019-7720-A2F2

OPENSUSE-SU-2026:10958-1

Affected Products

Google Chrome

References · 440

• https://osv.dev/vulnerability/DEBIAN-CVE-2026-11056 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-11056 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11056 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10958-1 · Vendor Advisory
• https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-11056 · Security Note
• https://suse.com/security/cve/CVE-2026-11256 · Note
• https://suse.com/security/cve/CVE-2026-10983 · Note
• https://suse.com/security/cve/CVE-2026-11081 · Note
• https://suse.com/security/cve/CVE-2026-11150 · Note
• https://suse.com/security/cve/CVE-2026-10955 · Note
• https://suse.com/security/cve/CVE-2026-11055 · Note
• https://suse.com/security/cve/CVE-2026-11136 · Note
• https://suse.com/security/cve/CVE-2026-11087 · Note
• https://suse.com/security/cve/CVE-2026-10916 · Note