CVE-2026-11213 is a critical security vulnerability in Google Chrome's Reading Mode before version 149.0.7827.53. It involves insufficient validation of untrusted input, which may allow a remote attacker with control over the renderer process to perform a sandbox escape via a specially crafted HTML page. This vulnerability is tracked under CWE-20 (Improper Input Validation) and has a CVSS v3.1 score of 9.6, indicating high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild at this time. The vendor advisory URL is provided but does not explicitly confirm patch availability or remediation status.

Successful exploitation could allow an attacker who has already compromised the renderer process to escape the sandbox environment, potentially leading to full system compromise. The vulnerability affects confidentiality, integrity, and availability of the affected system. Given the CVSS score of 9.6, the impact is critical.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop.html for current remediation guidance. Until an official fix is confirmed, users should exercise caution when interacting with untrusted content in Reading Mode and consider disabling this feature if possible.