CVE-2026-11241
High · 8.0CVSS
8.0
EPSS
0.1%
Published
Jun 5, 2026
CISA due date
—
The record
Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| openSUSE:Tumbleweed | chromium | 0 | 149.0.7827.53-2.1 |
Related vulnerabilities
- CVE-2026-14425 Use after free in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker… Also affects chromium
- CVE-2026-14427 Heap buffer overflow in Skia in Google Chrome prior to 150.0.7871.46 allowed a remote… Also affects chromium
- CVE-2026-14430 Integer overflow in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker… Also affects chromium
- CVE-2026-14431 Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to… Also affects chromium
- CVE-2026-14432 Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to… Also affects chromium
- CVE-2026-14426 Use after free in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker… Also affects chromium
- CVE-2026-14428 Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to… Also affects chromium
- CVE-2026-14429 Insufficient validation of untrusted input in Skia in Google Chrome prior to… Also affects chromium