Executive brief
A vulnerability exists in Google Chrome's Dawn component, which handles graphics processing. An attacker who has already partially compromised the browser could use this flaw to escape the security sandbox that normally keeps web content isolated from the rest of the computer. This could allow for broader access to the user's system or data beyond the browser's intended limits.
Technical details
A use-after-free vulnerability exists in the Dawn component of Google Chrome. Dawn is the implementation of the WebGPU standard in Chromium. The vulnerability is triggered when the browser attempts to use memory that has already been freed, specifically within the context of the Dawn graphics layer. To exploit this, a remote attacker must first compromise the renderer process (e.g., via a separate V8 or Blink vulnerability) and then entice a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to bypass the Chrome sandbox, potentially leading to arbitrary code execution on the host operating system. The issue is resolved in Chrome version 149.0.7827.53.
Affected products
- Google Chrome prior to 149.0.7827.53
Timeline
- 2026-06-02: patched: Chrome 149.0.7827.53 released to stable channel.
- 2026-06-04: disclosed: CVE-2026-11154 published.