CVE-2026-113023

Summary

Improper input validation in Chrome's Extensions component allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page, bypassing security boundaries.

Exploitability

Requires user interaction (e.g., visiting a malicious page) and exploitation difficulty is low given the vulnerability type, but no public exploit exists.

Blast radius

Successful exploitation could lead to full system compromise outside Chrome's sandbox, enabling data theft, malware installation, or lateral movement.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.