CVE-2026-113189

Summary

A use-after-free vulnerability in Google Chrome's Core component allowed remote attackers to execute arbitrary code outside the sandbox by tricking a user into visiting a crafted HTML page.

Exploitability

Exploitation requires social engineering (user interaction) to load a malicious HTML page; no known public exploit exists.

Blast radius

Successful exploitation could lead to full system compromise via sandbox escape, enabling remote code execution with the privileges of the compromised Chrome process.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.