CVE-2026-11295 is a newly published Google Chrome for Android WebView vulnerability, disclosed on June 4, 2026 and patched before version 149.0.7827.53, that could let a remote attacker escalate privileges if a user opened a crafted HTML page. The oddity is not that Chrome had another bug...