cve 2026 11685

CVE-2026-11685 is a high-severity Chromium MediaCapture vulnerability affecting Google Chrome on macOS before version 149.0.7827.103, disclosed on June 8, 2026. The flaw could allow a remote attacker to leak cross-origin data through a crafted HTML page, targeting the browser's camera, microphone, and permission systems. While the vulnerability is macOS-specific, WindowsForum readers should note that similar cross-origin leaks in Chromium often have implications for Windows users, as Chrome shares a common codebase. The advisory highlights the importance of updating to the latest Chrome version to mitigate such risks.