CVE-2026-11017
MediumCVSS 6.5Summary
Inappropriate implementation in Link Preview in Google Chrome prior to version 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.
Risk Assessment
An attacker could exploit this vulnerability to perform unauthorized actions in the browser, potentially leading to data leakage or other security threats.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and secure the system against potential attacks.
Original NVD description (English source)
Inappropriate implementation in Link Preview in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)