CVE-2026-113222

Summary

A use-after-free vulnerability in Google Chrome's V8 JavaScript engine allowed remote attackers to execute arbitrary code outside the sandbox by tricking users into visiting a malicious HTML page.

Exploitability

Exploitation requires user interaction (e.g., clicking a link or visiting a crafted page) and is non-trivial due to memory corruption complexity, but possible given sufficient resources.

Blast radius

Successful exploitation could lead to full system compromise outside Chrome's sandbox, enabling data theft, malware installation, or lateral movement within the victim's environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.