Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.6
CVE-2026-11293: Google Chrome prior to 149.0.7827.53 allows sandbox escape
CVE-2026-11293 · published 5 months ago
Summary
A security issue in Google Chrome's HTML handling could allow an attacker to break out of the browser's security sandbox and gain unauthorized access to your computer. This issue affects older versions of Google Chrome, and we recommend updating to the latest version to fix the problem.
What to do
- Update debian chromium to version 149.0.7827.53-1~deb12u1.
- Update debian chromium to version 149.0.7827.53-1~deb13u1.
- Update debian chromium to version 149.0.7827.53-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:11 | debian | chromium | All versions |
| Debian:12 | debian | chromium |
< 149.0.7827.53-1~deb12u1 Fix: upgrade to 149.0.7827.53-1~deb12u1
|
| Debian:13 | debian | chromium |
< 149.0.7827.53-1~deb13u1 Fix: upgrade to 149.0.7827.53-1~deb13u1
|
| Debian:14 | debian | chromium |
< 149.0.7827.53-1 Fix: upgrade to 149.0.7827.53-1
|
Original advisory text
Use after free in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
Use after free in Input in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-416Use After Free
Timeline
Published5 Jun 2026
Updated29 Oct 2026
First seen5 Jun 2026
Track software like this
Free during beta