cve 2026 11688

CVE-2026-11688 is a high-severity vulnerability in Google Chrome before version 149.0.7827.103, disclosed on June 8, 2026. This SVG implementation flaw allows a remote attacker to execute arbitrary code inside Chrome's sandbox when a user opens a crafted HTML page. For Windows users and IT administrators, this bug underscores the urgency of patching browser vulnerabilities that exploit complex document rendering. The risk is heightened because the attack vector involves attacker-controlled web content and code paths that convert markup into live graphics. Applying the latest Chrome update is critical to prevent sandbox escape and code execution.