cve-2026-11682

CVE-2026-11682 is a high-severity Google Chrome vulnerability disclosed on June 8, 2026, affecting Chrome on Linux before version 149.0.7827.103. The flaw allows a sandbox escape after a renderer compromise via a crafted HTML page, enabling an attacker to break out of Chrome's security sandbox following an initial renderer exploit. This second-stage move can turn a renderer bug into a more serious system compromise. Discussions on WindowsForum highlight confusion around affected version metadata, with discrepancies between Google's Linux build numbering and NVD's CPE configuration. For defenders, the recommended action is straightforward: patch Chrome and Chromium-based browsers to the latest version to mitigate the risk.