Improper input validation in Google Chrome
Priority LOW 36CWE-20Published · Updated
Key facts
- Attack vector
- Adjacent network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.
Summary
Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00112 1st percentileScored 2026-11-07
Fix Fixed Chrome (Google): 149.0.7827.53
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Chrome | 149.0.7827.53 to before 149.0.7827.53 | 149.0.7827.53 | Patch available | CNA |
- Chrome VendorGoogle Affected 149.0.7827.53 to before 149.0.7827.53 Fixed in 149.0.7827.53 Patch available CNA
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | before 149.0.7827.53 | Vulnerable | |
| cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Apple |
| cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Linux |
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions before 149.0.7827.53 Vulnerable ·Google
- cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Apple
- cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux
- cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
Remediation
- Fix · CNA Chrome (Google) Fixed in 149.0.7827.53
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Google Chrome 149.0.7827.53
427 records Highest priority Priority MEDIUM 144 MEDIUM, 283 LOW
Other records, highest priority first
- TI-2026-09346 Use after free in Google ChromePriority MEDIUM 52
- TI-2026-09611 Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed…Priority MEDIUM 47
- TI-2026-09341 Out-of-bounds read in Google ChromePriority MEDIUM 44
Vendor assessments
Timeline
- 2026-10-02 Threatist record created from CVE-2026-11241
- 2026-10-03 Alias added: GHSA-h7j5-3779-2jpx
References
More Google Chrome vulnerabilities
- TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
- TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
Sources
- CVE-2026-11241 · CVE Program
- CVE-2026-11241 · NVD
- FIRST EPSS
- GHSA-h7j5-3779-2jpx · GitHub Advisory Database · CC BY 4.0
- CVE-2026-11241 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences