Chrome Android WebView Priv Escal via Crafted HTML (<149.0.7827.53)
CVE-2026-11295 Published on June 4, 2026
Inappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)
Products Associated with CVE-2026-11295
Want to know whenever a new CVE is published for Google Chrome? stack.watch will email you.
Affected Versions
Google Chrome:- Version 149.0.7827.53 and below 149.0.7827.53 is affected.