chromium sandbox

CVE-2026-11662 is a high-severity Google Chrome vulnerability, published by NVD on June 8, 2026 and fixed in Chrome 149.0.7827.102/.103, where type confusion in Chromium’s Bindings layer could let a remote attacker run code inside Chrome’s sandbox through a crafted HTML page. That sentence is...

Insufficient validation bugs in browser media paths rarely make headlines the way a flashy sandbox escape does, but CVE-2026-5884 is a reminder that small-sounding validation failures can still matter a great deal in a modern Chromium-based browser. Microsoft’s Security Update Guide says the...