Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Use after free in File Input in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 2 products
🚨 CRITICAL: CVE-2026-11100 (CVSS 9.6) - Use-after-free in Google Chrome for Mac <149.0.7827.53 enables sandbox escape via crafted HTML. Update immediately. #CVE #PatchNow #ThreatIntel https://t.co/eATWVdqISS
Post summary
The tweet announces a critical CVE affecting Chrome for Mac and stresses the need for an update, providing technical details but no proof of exploitation or code.
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | apple | macos | - | - | - |
| App | chrome | - | - | - |