CVE-2026-11037
Google Chrome, chrome, macos
Out of bounds write in Codecs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file. (Chromium security severity: Medium)
- CVSS
- 9.6
- EPSS
- 0.28% 20.1% percentile
- CISA KEV
- Not listed
- Published
- 2026.06.05