Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Low)
Metrics
Affected Vendors & Products
References
History
Thu, 04 Jun 2026 23:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Low) | |
| Weaknesses | CWE-20 | |
| References |
|
Status: PUBLISHED
Assigner: Chrome
Published:
Updated: 2026-06-04T23:06:13.423Z
Reserved: 2026-06-04T17:11:11.683Z
Link: CVE-2026-11273
No data.
Status : Received
Published: 2026-06-05T00:17:04.387
Modified: 2026-06-05T00:17:04.387
Link: CVE-2026-11273
No data.
OpenCVE Enrichment
No data.