CVE-2026-113116

Summary

A use-after-free vulnerability in Chrome's DevTools allows a remote attacker to execute arbitrary code outside the sandbox by tricking a user into interacting with a malicious HTML page.

Exploitability

Exploitation requires social engineering to诱导 the user to open a crafted page and interact with DevTools, and relies on memory corruption primitives that are non-trivial to stabilize.

Blast radius

Successful exploitation could lead to full system compromise outside Chrome's sandbox, enabling data theft, malware installation, or lateral movement from a compromised browser session.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.