CVE Watch23 jul 2026

CVE-2026-11691

Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compro

CVSS

3.1

Bajo

EPSS

0.2%

KEV

—

Exploit Today

0-100

Publicado: 9 jun 2026 · Última mod.: 23 jul 2026 · CWE-20

EPSS · 30d

0.2%EPSS · 30 días0.2%

2026-07-052026-08-02

Descripción técnica

Insufficient validation of untrusted input in New Tab Page in Google Chrome prior to 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. (Chromium security severity: High)

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-215557.5 ALT

—

——0In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed6h CVE-2026-215547.5 ALT

—

——0In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed6h CVE-2026-215537.5 ALT

—

——0In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed4h CVE-2026-215527.5 ALT

—

——0In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed4h CVE-2026-215517.5 ALT

—

——0In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed4h CVE-2026-215507.5 ALT

—

——0In modem, there is a possible improper input validation. This could lead to remote denial of service with no additional execution privileges needed4h