CVE-2026-113186

Summary

A memory corruption vulnerability in Chrome's DevTools allowed remote attackers to escape the browser sandbox and execute arbitrary code on the victim's machine by tricking them into visiting a malicious page.

Exploitability

Exploitation requires user interaction (e.g., clicking a link or visiting a crafted page) and high skill due to the complexity of memory corruption attacks, but no authentication or prior access is needed.

Blast radius

Successful exploitation could lead to full system compromise, including data theft, malware installation, or lateral movement within the compromised environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.