CVE-2026-11171 is an integer overflow vulnerability in the Blink rendering engine used by Google Chrome versions before 149.0.7827.53. Exploitation of this vulnerability enables remote attackers to execute arbitrary code inside the sandbox environment via a crafted HTML page. The vulnerability is rated with a CVSS 3.1 score of 8.8, indicating high impact on confidentiality, integrity, and availability. Google has published a stable channel update to fix this issue, as referenced in their official advisory.

Successful exploitation allows remote code execution within the sandboxed environment of the browser, potentially compromising the confidentiality, integrity, and availability of the affected system. This could lead to unauthorized actions performed by the attacker under the context of the browser process.

Users should update Google Chrome to version 149.0.7827.53 or later, where this integer overflow vulnerability has been addressed. The vendor advisory confirms the availability of this update. No additional mitigation steps are indicated beyond applying the official patch.