CVE-2026-113252

Summary

Improper input validation in ANGLE (a graphics library used by Chrome) on Windows allowed a remote attacker to escape the browser sandbox and execute arbitrary code outside it by tricking a user into visiting a malicious HTML page.

Exploitability

Exploitation requires user interaction (e.g., clicking a link or opening a crafted webpage) and relies on specific memory corruption in ANGLE’s shader compilation logic, making it moderately difficult without insider knowledge of the vulnerability.

Blast radius

Successful exploitation could lead to full system compromise, including data theft, malware installation, and lateral movement within the affected host and potentially the network.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later on Windows systems.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.