PT-2026-46743 · Google · Google Chrome

Tianyi Hu · CVE-2026-11217 · Published 2026-02-25 · Updated 2026-06-05

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53

Description An inappropriate implementation in Fenced Frames allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a security mechanism that ensures pages from different sites are run in separate processes to prevent data theft.

Recommendations Update to version 149.0.7827.53 or later.

Fix

DoS

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

BDU:2026-08123

CVE-2026-11217

ECHO-7945-1BC4-B0CA

OPENSUSE-SU-2026:10958-1

Affected Products

Google Chrome

References · 440

• https://bdu.fstec.ru/vul/2026-08123 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-11217 · Vendor Advisory
• https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-11217 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-11217 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2026:10958-1 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-11217 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-11217 · Security Note
• https://suse.com/security/cve/CVE-2026-11084 · Note
• https://suse.com/security/cve/CVE-2026-11017 · Note
• https://suse.com/security/cve/CVE-2026-11200 · Note
• https://suse.com/security/cve/CVE-2026-10918 · Note
• https://suse.com/security/cve/CVE-2026-10894 · Note
• https://suse.com/security/cve/CVE-2026-10944 · Note
• https://suse.com/security/cve/CVE-2026-10923 · Note