CVE-2026-11112

EUVD-2026-34573
Insufficient validation of untrusted input in Chromoting in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: Medium)
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
ChromeCNA
UNKNOWN
---