CVE-2026-11666

Publish date: June 9, 2026
Severity
Medium
CVSS score
5.4
Package
chromium
Affected versions
>= 147.0.7727.101-1~deb13u1

Insufficient validation of untrusted input in Input in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)