CVE-2026-11701 is a medium severity vulnerability in Google Chrome's Guest View component affecting versions before 149.0.7827.103. The vulnerability arises from insufficient validation of untrusted input, enabling remote attackers to conduct UI spoofing attacks through crafted HTML content. This could mislead users by displaying deceptive interface elements. The CVSS 3.1 base score is 5.4, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, unchanged scope, limited confidentiality impact, no integrity impact, and low availability impact. No known exploits in the wild have been reported. The vendor advisory linked indicates a stable channel update addressing this issue.

Successful exploitation allows remote attackers to perform UI spoofing, potentially misleading users by displaying deceptive user interface elements. The impact includes limited confidentiality loss and low availability impact. There is no reported integrity impact. No known active exploitation has been observed.

Update Google Chrome to version 149.0.7827.103 or later, where this vulnerability has been fixed. Since this is a client-side application, applying the official update is the recommended remediation. No additional vendor advisories indicate alternative mitigations or that no action is required.