Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-11235

Опубликовано: 04 июн. 2026
Источник: debian

Описание

Insufficient policy enforcement in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

Пакеты

ПакетСтатусВерсия исправленияРелизТип
chromiumfixed149.0.7827.53-1package
chromiumend-of-lifebullseyepackage

Связанные уязвимости

CVSS3: 8.8
ubuntu
4 месяца назад

Insufficient policy enforcement in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

CVSS3: 9
redhat
4 месяца назад

Insufficient policy enforcement in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

CVSS3: 8.8
nvd
4 месяца назад

Insufficient policy enforcement in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)

msrc
4 месяца назад

Chromium: CVE-2026-11235 Insufficient validation of untrusted input in Compositing

CVSS3: 8.8
github
4 месяца назад

Insufficient policy enforcement in Compositing in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Low)