CVSS 3.1
6.8 mediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:NCVE-2026-11218
Medium (6.8) in google chrome. EPSS 0.2% chance of exploitation in the next 30 days.
Inappropriate implementation in PlatformIntegration in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a malicious file. (Chromium security severity: Low)
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-11-01)
- CWEs
- CWE-20, CWE-94
- Published
- Modified
- Record from
- the NVD, synced
Affected
- google:chrome