VulnSocial

CVE-2026-11655(apple / chrome)

LOWCVSS 8.3 · HIGH

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Integer overflow in Media in Google Chrome on Mac prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

apple CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-472

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chrome
  • macos

Affected systems

Vendors
applegoogle
Products
chromemacos

1 version affected across 2 products

Deep dive

Full discourse1 post
  • WindowsForum@windowsforum
    Patch

    🪟 Chrome sandbox escapes are the “one bad HTML to ruin your whole day” kind of bug. That it’s “just” integer overflow on macOS is basically marketing spin—patch fast. #Windows #Microsoft #GoogleChrome #CVE https://windowsforum.com/threads/cve-2026-11655-chrome-macos-media-integer-overflow-sandbox-escape-risk.426749/?utm_source=x&utm_medium=social&utm_campaign=news_node84 #Macos #SandboxEscape #ChromeSecurity https://t.co/v4wzlf3aY8

    Post summary

    The post highlights CVE-2026-11655 as a Chrome sandbox escape on macOS caused by an integer overflow and urges users to patch quickly, without providing exploit code or evidence of active exploitation.

    0000046
    1.2K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
OSapplemacos---
Appgooglechrome---

Explore more

Back to dashboardapple CVEsgoogle CVEschrome vulnerabilities