CVE-2026-113263

Summary

A use-after-free vulnerability in Google Chrome's Core component on Android allowed remote attackers to execute arbitrary code outside the sandbox by tricking a user into visiting a crafted HTML page.

Exploitability

Exploitation requires social engineering (user interaction) to load a malicious HTML page and relies on memory corruption primitives, making it moderately difficult but feasible for skilled attackers.

Blast radius

Successful exploitation could lead to full compromise of the affected device, including data theft, malware installation, or lateral movement within the user's environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome on Android to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.