CVE-2026-11117 is a use-after-free vulnerability in the Views component of Google Chrome on Windows platforms. This vulnerability enables remote code execution when a user visits a specially crafted HTML page. The issue affects Chrome versions before 149.0.7827.53. The CVSS v3.1 base score is 8.8, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts confidentiality, integrity, and availability. Google has published a stable channel update to fix this vulnerability.

Successful exploitation allows a remote attacker to execute arbitrary code on the affected system, potentially leading to full compromise of the user's environment. The vulnerability impacts confidentiality, integrity, and availability of the system. No known exploits in the wild have been reported at this time.

Users and administrators should update Google Chrome on Windows to version 149.0.7827.53 or later. This update contains the official fix for the use-after-free vulnerability. No additional mitigation steps are required beyond applying the update. Refer to the official Google Chrome stable channel update advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for details.