Google disclosed CVE-2026-11640 on June 8, 2026, as a critical integer overflow in Chrome’s bundled libyuv library, fixed in Chrome 149.0.7827.102/.103 for desktop platforms, with NVD describing it as a renderer-compromise-to-sandbox-escape flaw triggered through a crafted HTML page. The short...