CVE-2026-11247 is a low-severity Chrome for Android vulnerability, disclosed June 4, 2026 and fixed before version 149.0.7827.53, in which insufficient policy enforcement in Custom Tabs could let a remote attacker leak cross-origin data through a crafted HTML page. The word low is doing a lot of...