CVE-2026-113078

Summary

Improper input validation in Chrome's Compositing component allowed remote code execution outside the sandbox via a malicious HTML page, enabling attackers to bypass security boundaries.

Exploitability

Requires user interaction (e.g., visiting a crafted webpage) and exploitation difficulty is non-trivial but feasible for skilled attackers given the sandbox escape potential.

Blast radius

Successful exploitation could lead to full system compromise, data theft, or lateral movement within the victim's environment due to sandbox escape.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.