cve 2026 11660

CVE-2026-11660 is a high-severity Chromium vulnerability in Chrome's New Tab Page that could allow sandbox escape. Disclosed by Google on June 8, 2026, the flaw affects Chrome versions before 149.0.7827.103. An attacker who has already compromised the renderer process could exploit a crafted HTML page to escape the browser sandbox, gaining higher privileges. While not a one-click exploit, this vulnerability is a serious concern for enterprise teams, who should prioritize patching even without a public exploit. The tag covers discussion of the CVE, its impact, and mitigation advice for Windows users running Chrome.