CVE-2026-113020

Summary

Improper input validation in Chrome's Date handling allowed remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page, bypassing Chrome's security isolation.

Exploitability

Requires user interaction (e.g., visiting a malicious page) and exploitation is non-trivial due to Chrome's sandbox, but the high CVSS reflects potential for full compromise once executed.

Blast radius

Successful exploitation could lead to full system compromise via sandbox escape, enabling data theft, malware installation, or lateral movement within the user's environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.