CVE-2026-113169

Summary

A memory corruption vulnerability in Chrome's WebAppInstalls component on Android allowed remote code execution outside the sandbox via a malicious web page.

Exploitability

Exploitation requires user interaction (e.g., visiting a crafted HTML page) and is non-trivial due to the need to trigger specific memory corruption conditions, but no public exploit exists.

Blast radius

Successful exploitation could lead to full system compromise on affected Android devices, including data theft, malware installation, or device control outside Chrome's sandbox.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome on Android to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.