CVE Catalog
CVE-2026-11229
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk0.01%
1th percentile - higher than 1% of all known CVEs
Summary
Inappropriate implementation in Enterprise in Google Chrome prior to version 149.0.7827.53 allowed a local attacker to perform privilege escalation via physical access to the device.
Risk Assessment
An attacker with physical access to the device may gain elevated privileges, potentially leading to unauthorized access to data or the system.
Recommendation
It is recommended to update Google Chrome to the latest version to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
Inappropriate implementation in Enterprise in Google Chrome prior to 149.0.7827.53 allowed a local attacker to perform privilege escalation via physical access to the device. (Chromium security severity: Low)