CVE-2026-11034
EUVD-2026-3448304.06.2026, 23:17
Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via malicious network traffic. (Chromium security severity: Medium)Enginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| chrome | 𝑥 ≤ 149.0.7827.53 | CNA |
Debian Releases
Common Weakness Enumeration
Vulnerability Media Exposure