CVE-2026-11629 is a use-after-free vulnerability in the Ozone subsystem of Google Chrome versions prior to 149.0.7827.103. This memory corruption issue could be triggered remotely via a specially crafted HTML page, potentially leading to heap corruption and allowing an attacker to execute arbitrary code or cause denial of service. The vulnerability is rated high severity with a CVSS 3.1 base score of 8.8, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality, integrity, and availability. The vendor advisory URL is provided but does not explicitly confirm patch availability in the input data.

Successful exploitation of this use-after-free vulnerability could lead to remote code execution or denial of service by corrupting heap memory. The attack requires user interaction (e.g., visiting a malicious web page) but no prior privileges. Confidentiality, integrity, and availability of the affected system could be fully compromised.

Patch status is not yet confirmed — check the vendor advisory at https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop_0153744567.html for current remediation guidance. Users and administrators should monitor official Google Chrome release notes and apply updates promptly once a fix is released.