Description
Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
Published: 2026-06-04
Score: 9.6 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Type confusion in the ANGLE graphics library within Google Chrome allows a remote attacker to potentially escape the browser sandbox by delivering a specifically crafted HTML page. This flaw can lead to elevated privileges and unauthorized access to system resources, posing a notable risk to confidentiality, integrity, and availability of the affected system.

Affected Systems

The vulnerability affects Google Chrome browsers prior to version 149.0.7827.53. No detailed version list is provided, so all installations of Chrome before the security release are considered at risk.

Risk and Exploitability

The CVSS score is 9.6, indicating a critical severity. The EPSS score is less than 1%, indicating a low probability of exploitation, and the vulnerability is not listed in CISA KEV. The attack vector appears to be remote; an adversary must supply a crafted HTML page that the victim views, which could be delivered via a malicious website or email. No exploit has been publicly reported, but the combination of type confusion and sandbox escape logic provides a plausible path for higher-privilege execution if the browser processes the malicious content.

Generated by OpenCVE AI on June 7, 2026 at 14:19 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update to the latest Google Chrome release (149.0.7827.53 or later).
  • If updating is not immediately possible, disable generic HTML parsing features or mitigate exposure by setting strict content security policies in the browser or using a restrictive network policy.
  • Enable Chrome’s Site Isolation setting to ensure each page is loaded in a separate renderer process, reducing the impact of any potential sandbox escape.

Generated by OpenCVE AI on June 7, 2026 at 14:19 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DSA Debian DSA DSA-6325-1 chromium security update
History

Sun, 07 Jun 2026 12:15:00 +0000

Type Values Removed Values Added
Title chromium-browser: Out of bounds read in ANGLE
Weaknesses CWE-843
References
Metrics threat_severity

None

threat_severity

Moderate


Fri, 05 Jun 2026 21:15:00 +0000

Type Values Removed Values Added
Title Type Confusion in ANGLE Allows Sandbox Escape via Crafted HTML Page

Fri, 05 Jun 2026 20:30:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*

Fri, 05 Jun 2026 19:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-416
Metrics cvssV3_1

{'score': 9.6, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}


Fri, 05 Jun 2026 07:00:00 +0000

Type Values Removed Values Added
First Time appeared Google
Google chrome
Vendors & Products Google
Google chrome

Fri, 05 Jun 2026 04:45:00 +0000

Type Values Removed Values Added
Title Type Confusion in ANGLE Allows Sandbox Escape via Crafted HTML Page

Thu, 04 Jun 2026 23:15:00 +0000

Type Values Removed Values Added
Description Type Confusion in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: Medium)
Weaknesses CWE-125
References

cve-icon MITRE

Status: PUBLISHED

Assigner: Chrome

Published:

Updated: 2026-06-05T18:46:36.402Z

Reserved: 2026-06-04T17:06:40.648Z

Link: CVE-2026-11061

cve-icon Vulnrichment

Updated: 2026-06-05T18:46:33.176Z

cve-icon NVD

Status : Analyzed

Published: 2026-06-04T23:17:10.580

Modified: 2026-06-05T20:28:13.990

Link: CVE-2026-11061

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-06-02T00:00:00Z

Links: CVE-2026-11061 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-06-07T14:30:16Z

Weaknesses
  • CWE-125

    Out-of-bounds Read

  • CWE-416

    Use After Free

  • CWE-843

    Access of Resource Using Incompatible Type ('Type Confusion')