Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.103 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension. (Chromium security severity: High)
Google Chrome | Chromium
Exploit
CVE-2026-11656
NVD
Refer to CVE-2026-11656 NVD advisory