CVE-2026-113084

Summary

Improper input validation in Chrome's Permissions component allowed a remote attacker to bypass sandbox restrictions and execute arbitrary code outside the sandbox via a crafted HTML page, leading to full system compromise.

Exploitability

Exploitation requires user interaction (e.g., visiting a malicious page) and relies on browser sandbox escape techniques; no public exploit exists, making it moderately difficult for attackers without advanced capabilities.

Blast radius

Successful exploitation could lead to complete compromise of the affected system, including data theft, malware installation, and lateral movement within the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.