CVE-2026-11088 is an integer overflow vulnerability in the ANGLE graphics engine within Google Chrome versions before 149.0.7827.53. Exploitation requires prior compromise of the renderer process and could enable an attacker to perform a sandbox escape, increasing the potential impact of an existing compromise. The vulnerability is identified as CWE-190 (Integer Overflow or Wraparound) and has a CVSS v3.1 base score of 9.6, indicating critical impact with network attack vector, low attack complexity, no privileges required, user interaction required, and complete confidentiality, integrity, and availability impact. No official remediation level or patch link is explicitly stated in the input, but a vendor advisory URL is provided for further details.

Successful exploitation could allow an attacker who has compromised the renderer process to escape the Chrome sandbox, potentially leading to full system compromise or further privilege escalation. The vulnerability impacts confidentiality, integrity, and availability at a high level. There are no known exploits in the wild at the time of this report.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed and applied, users should exercise caution with untrusted web content and ensure Chrome is updated promptly once a patch is released.