CVE-2026-11014
BaseFortify
Publication date: 2026-06-04
Last updated on: 2026-06-04
Assigner: Chrome
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| chrome | to 149.0.7827.53 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability involves insufficient policy enforcement in Google Chrome extensions prior to version 149.0.7827.53. An attacker who convinces a user to install a malicious Chrome extension can exploit this flaw to bypass site isolation protections by using a specially crafted extension.
How can this vulnerability impact me? :
If exploited, this vulnerability allows an attacker to bypass Chrome's site isolation feature, which is designed to separate different websites into different processes for security. This could potentially allow the attacker to access or manipulate data across sites that should be isolated, increasing the risk of data leakage or unauthorized access.