VulnSocial

CVE-2026-11282Disclosure(google / chrome)

LOWCVSS 9.6 · CRITICAL

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Patch google chrome systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Insufficient policy enforcement in Sandbox in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Low)

google CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-693

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome
  • linux_kernel

Threat summary

  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • 3 total mentions across 1 day

Affected systems

Vendors
googlelinux
Products
chromelinux_kernel

1 version affected across 2 products

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-06-05: 3Patch / Workaround · 2026-06-05: 1Technical Details · 2026-06-05: 306-05
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets4 URLs
Full discourse3 posts
  • ADK Cyber@ADKCyber
    Patch

    Google Chrome on Linux prior to 149.0.7827.53 contains a high-severity sandbox escape vulnerability (CVE-2026-11282, CVSS 9.6). Organizations using Chrome on Linux should update immediately. https://nvd.nist.gov/vuln/detail/CVE-2026-11282 http://adkcyber.com via NVD Recent High CVSS #CyberSecurity #InfoSec #Vulnerability #AI #MachineLearning

    Post summary

    Google Chrome on Linux prior to 149.0.7827.53 contains a high‑severity sandbox escape vulnerability (CVE‑2026‑11282, CVSS 9.6); users are urged to update immediately to mitigate the risk.

    0000044
    83 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-11282 Insufficient policy enforcement in Sandbox in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a cr… https://www.cve.org/CVERecord?id=CVE-2026-11282 ----- Traducción: CVE-2026-11282 Ins… http://infoflow.cloud`

    Post summary

    The text announces CVE‑2026‑11282, highlighting a sandbox escape flaw in Google Chrome for Linux, but it does not provide a PoC, exploit code, active exploitation evidence, or patch details.

    0000045
    79 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-11282 Insufficient policy enforcement in Sandbox in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a cr… https://www.cve.org/CVERecord?id=CVE-2026-11282

    Post summary

    The text announces CVE-2026-11282, describing a potential sandbox escape in Chrome on Linux and linking to the CVE record, but provides no PoC, exploit code, patch, or evidence of active exploitation.

    00000205
    57.6K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appgooglechrome---
OSlinuxlinux_kernel---

Explore more

Back to dashboardgoogle CVEslinux CVEschrome vulnerabilities