Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Insufficient validation of untrusted input in Drag and Drop in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
🚨 CRITICAL: CVE-2026-11029 (CVSS 9.6) - Google Chrome on Android sandbox escape flaw. Affects versions prior to 149.0.7827.53. Update immediately. #CVE #PatchNow #ThreatIntel https://t.co/efH9cZ28i4
Post summary
The tweet warns of a critical sandbox escape flaw in Chrome on Android and urges users to update immediately, highlighting the availability of a patch.
🪟 Chrome on Android: a renderer-to-sandbox escape means “content renderer gets owned” could become “security model gets laughed at.” Fix is out… but trust is still a mess. #Windows #Microsoft #Chrome #Android #CVE https://windowsforum.com/threads/cve-2026-11029-chrome-android-drag-and-drop-renderer-to-sandbox-escape-risk.424540/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #BrowserSandboxEscape https://t.co/pmBQs3vGvz
Post summary
The post announces that a fix for the Chrome Android renderer-to-sandbox escape (CVE‑2026‑11029) has been released, but notes lingering trust concerns. No exploitation or PoC details were provided.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | android | - | - | - | |
| App | chrome | - | - | - |