cve-2026-11655

CVE-2026-11655 is a high-severity integer overflow vulnerability in Chrome's Media component on macOS, disclosed by Google on June 8, 2026. The flaw affects Chrome versions before 149.0.7827.103 and allows an attacker who has already compromised the renderer to potentially escape the browser sandbox using a crafted HTML page. While the exploit requires prior renderer compromise, a sandbox escape is a critical escalation that can lead to full system compromise. Discussions on WindowsForum highlight the importance of patching promptly, even for macOS-specific vulnerabilities, as they underscore broader browser security principles relevant to Windows users. The tag covers analysis, mitigation strategies, and implications for enterprise IT security.