CVE-2026-113235

Summary

Google Chrome prior to version 156.0.8078.47 had improper input validation in its password management component, allowing a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Exploitability

Exploitation requires user interaction (e.g., visiting a malicious webpage) and is non-trivial due to Chrome’s sandboxing, though the Medium Chromium security severity suggests some bypass feasibility.

Blast radius

Successful exploitation could lead to full system compromise outside the Chrome sandbox, enabling data theft, malware deployment, or lateral movement from a compromised browser session.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.