PT-2026-46743 · Google · Google Chrome

Tianyi Hu · Published 2026-06-02 · Updated 2026-06-04 · CVE-2026-11217

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53

Description An inappropriate implementation in Fenced Frames allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a security mechanism that ensures pages from different sites are run in separate processes to prevent data theft.

Recommendations Update to version 149.0.7827.53 or later.

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2026-11217

Affected Products

Google Chrome

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-11217 · Security Note
• https://crbug.com/487564032 · Note
• https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html · Note
• https://issues.chromium.org/issues/487564032 · Note