CVE-2026-11207: Insufficient validation of untrusted input in Autofill in Google Chrome prior to 149

Synopsis

Insufficient input validation in the Autofill component of Google Chrome (versions prior to 149.0.7827.53) allows a remote attacker to escape the browser sandbox via specially crafted network traffic. The attack is reachable over the network, requires no authentication, and needs only a single user interaction such as visiting a malicious page. Successful exploitation gives the attacker full read, write, and denial-of-service capability on the affected system, breaking out of the browser's isolation boundary. A patched-image rebuild at version 149.0.7827.53 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the victim's browser over the network, meaning the malicious traffic or page is delivered remotely without any need for local access.

• AuthenticationNot required

  No account or credential is needed; the attacker can target any user who navigates to attacker-controlled content.

• Victim interactionRequired

  The victim must interact with a malicious page or network resource, such as visiting a crafted URL, giving this a social-engineering component the attacker must arrange.

• Attack complexityDetail

  Attack complexity is Low, meaning the exploit is reliable and does not depend on race conditions, specific memory layouts, or other hard-to-control environmental factors.

Blast Radius

• Reads sensitive data accessible to the browser process outside the sandbox, including stored credentials, cookies, and session tokens.
• Writes or modifies files and data on the host system at the privilege level of the escaped process.
• Can terminate or crash the browser and potentially other processes on the host, causing a denial of service.
• Full sandbox escape means subsequent payloads can operate outside Chrome's isolation boundary, enabling further host-level compromise.