cve 2026 11690

CVE-2026-11690 is a high-severity out-of-bounds read and write vulnerability in Google Chrome's Media component on macOS, patched in version 149.0.7827.103. Published June 8, 2026, the flaw could allow an attacker with a compromised renderer to execute code inside Chrome's sandbox via a crafted HTML page. While macOS-specific, the vulnerability highlights broader browser security themes relevant to Windows users, including sandbox escape risks and the importance of timely patching. WindowsForum discussions emphasize that this is not a trivial crash but a chained exploit requiring multiple conditions, reinforcing the need for defense-in-depth and regular updates across all platforms.