[CVE-2026-11158] Insufficient validation of untrusted input in Downloads in Google Chrome on Mac prior to 149.0.7827.…

Descripción técnica

Insufficient validation of untrusted input in Downloads in Google Chrome on Mac prior to 149.0.7827.53 allowed a local attacker to potentially perform a sandbox escape via a crafted AppleScript command. (Chromium security severity: Medium)

Puntuación CVSS

Score: 8.6/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Productos afectados

Chrome, Macos — Google, Apple

Debilidades (CWE)

CWE-20

Fuente oficial

Publicado en NIST NVD.