CVE-2026-11021: Insufficient validation of untrusted input in GPU in Google Chrome on Windows prior to 149

Synopsis

This is an insufficient input validation vulnerability in the GPU component of Google Chrome on Windows, affecting all versions prior to 149.0.7827.53. It is reachable over the network and requires no authentication, though a victim must visit a crafted HTML page; critically, the attacker must already have compromised the Chrome renderer process before this bug becomes exploitable. Successful exploitation enables a sandbox escape, giving the attacker capabilities beyond the Chrome sandbox including full confidentiality, integrity, and availability impact on the host. A patched-image rebuild at version 149.0.7827.53 is available on HarborGuard for affected environments.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker delivers a crafted HTML page over the network, so the target Chrome instance must be reachable in the sense that the user browses to attacker-controlled content.

• AuthenticationNot required

  No account or credentials are required; any user browsing to a crafted page can be targeted.

• Victim interactionRequired

  The victim must open a crafted HTML page in Chrome, making this a social-engineering vector that requires the user to navigate to or be redirected to attacker-controlled content.

• Attack complexityDetail

  The CVSS vector marks complexity as Low, but in practice a precondition exists: the attacker must already control the Chrome renderer process before this bug enables a sandbox escape; once that precondition is met, the exploit itself is reliable and condition-free.

Blast Radius

• An attacker who achieves the sandbox escape reads files, credentials, and session data accessible to the Windows user running Chrome.
• The attacker can write to or modify files and registry entries within the scope of that Windows user account.
• The attacker can terminate or crash the Chrome process and any child processes, disrupting the user's session.
• With sandbox restrictions removed, the attacker can execute arbitrary code in the context of the Windows user, enabling persistence or lateral movement on the host.