CVE-2026-113089

Summary

Improper input validation in Chrome's PrintPreview feature allowed remote attackers to execute arbitrary code outside the sandbox by tricking users into visiting a malicious page.

Exploitability

Requires user interaction (e.g., clicking a link) and exploitation is non-trivial due to sandboxing, but the Medium Chromium security severity suggests partial bypass was possible.

Blast radius

Successful exploitation could lead to full system compromise via sandbox escape, enabling data theft, malware deployment, or lateral movement within the victim's environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.