cve-2026-11029

  1. CVE-2026-11029 Chrome Android Drag and Drop: Renderer-to-Sandbox Escape Risk

    Google assigned CVE-2026-11029 to an insufficient-input-validation flaw in Chrome’s Drag and Drop handling on Android, fixed before version 149.0.7827.53 and published by NVD on June 4, 2026, where it remains without a final NIST CVSS score. The dry wording understates the interesting part: this...