CVEFinder.io

CVE-2026-11241

⚠️ high
🔍 Scan for this CVE
Summary

Insufficient validation of untrusted input in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)

CVSS Score
8.0
High
EPSS Score
0.0
Exploit Probability
Published Date
2026-06-05
First Seen: 2026-06-05
📊 Relative Risk Intelligence

This CVE is High Risk - more severe than 77.4% of all 336,041 vulnerabilities in our database.

#75,941
Top 25% most severe
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jun 5, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Total
Complete system compromise possible
SSVC data provided by CISA
Last Modified 2026-06-05
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CWE IDs (Weakness Types)
CWE-20

📦 Affected Products 1

Vendor Product Status Affected Versions
google chrome Affected
< 149.0.7827.53

🔗 References 2

https://chromereleases.googleblog.com/2026/06/stable...
Vendor Advisory
https://issues.chromium.org/issues/497203741
Permissions Required

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-15764 ⚠️ high 7.5 0.3 Use after free in Ozone in Google Chrome on Linux prior to 150.0.7871.125 allowed a remote attacker who convinced a user... 2026-07-14
CVE-2026-15765 ⚠️ high 7.5 0.3 Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engag... 2026-07-14
CVE-2026-15766 🔶 medium 6.5 0.3 Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to obtain potentially sensi... 2026-07-14
CVE-2026-15767 ⚠️ high 8.8 0.3 Heap buffer overflow in libyuv in Google Chrome on Windows prior to 150.0.7871.125 allowed a remote attacker to execute ... 2026-07-14
CVE-2026-15768 🔶 medium 6.5 0.2 Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to ... 2026-07-14
CVE-2026-15769 ⚠️ high 8.3 0.2 Insufficient validation of untrusted input in Linux Toolkit Theming in Google Chrome on Linux prior to 150.0.7871.125 al... 2026-07-14
These CVEs affect the same products