CVE-2026-11116 is a use-after-free vulnerability (CWE-416) in the Chromoting feature of Google Chrome versions before 149.0.7827.53. Exploitation requires remote network interaction and user interaction, potentially allowing arbitrary code execution with high impact on confidentiality, integrity, and availability. The vulnerability is publicly disclosed with no known exploits in the wild at the time of publication. The vendor advisory link points to a Chrome stable channel update announcement, but no explicit patch or remediation status is detailed in the provided input.

Successful exploitation can lead to remote code execution, compromising the affected system's confidentiality, integrity, and availability. The vulnerability is exploitable remotely without privileges but requires user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until confirmed, users should apply the latest Chrome updates as they become available to address this vulnerability.