PatchSiren cyber security CVE debrief

CVE-2026-11155 Google CVE debrief

A medium-severity vulnerability, CVE-2026-11155, was found in Google Chrome prior to version 149.0.7827.53. This issue is related to an inappropriate implementation in CSS, which could allow a remote attacker to leak cross-origin data via a crafted HTML page.

Vendor: Google
Product: Chrome
CVSS: MEDIUM 4.3
CISA KEV: Not listed in stored evidence
Original CVE published: 2026-06-04
Original CVE updated: 2026-06-08
Advisory published: 2026-06-04
Advisory updated: 2026-06-08

Who should care

Users of Google Chrome prior to version 149.0.7827.53 should update to the latest version to mitigate this vulnerability.

Technical summary

The vulnerability has a CVSS score of 4.3 and is classified as CWE-352. It requires user interaction (UI:R) and can result in confidentiality loss (C:L).

Defensive priority

Medium

Recommended defensive actions

Update Google Chrome to version 149.0.7827.53 or later.

Evidence notes

The CVE record and NVD detail can be found at [cve-org] and [nvd], respectively.

Official resources

CVE-2026-11155 CVE record
CVE.org
CVE-2026-11155 NVD detail
NVD
Source item URL
nvd_modified
Mitigation or vendor reference
[email protected] - Vendor Advisory
Source reference
[email protected] - Permissions Required

CVE-2026-11155 was published on [cvePublishedAt] and modified on [cveModifiedAt].