CVE-2026-113014

Summary

A use-after-free vulnerability in Chrome's PerformanceAPIs allows a remote attacker to execute arbitrary code outside the sandbox by tricking a user into visiting a malicious HTML page.

Exploitability

Exploitation requires social engineering (user interaction) to visit a crafted page; no known public exploit exists, but the flaw is in a browser component with high reliability exploitation potential once triggered.

Blast radius

Successful exploitation could lead to full system compromise via sandbox escape, enabling data theft, malware installation, or lateral movement within the user's environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.