Google Chrome Headless Sandbox Escape (CVE-2026-12027)
critical-cve-against-dependency · active
A vulnerability in the Headless component of Google Chrome before version 149.0.7827.115 could allow a remote attacker who has already compromised the renderer process to escape the browser sandbox via a crafted HTML page. Users should update Chrome to the latest stable release.