CVE-2026-113126

Summary

A memory corruption vulnerability in Chrome's PolicyContainer component allowed remote attackers to execute arbitrary code outside the sandbox via a malicious HTML page.

Exploitability

Exploitation requires user interaction (e.g., visiting a crafted webpage) and is non-trivial due to Chrome's existing mitigations, though not impossible given the memory corruption nature.

Blast radius

Successful exploitation could lead to full system compromise outside the browser sandbox, enabling data theft, malware installation, or lateral movement.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.