CVE-2026-113283

Summary

A memory corruption vulnerability in Google Chrome's CredentialProvider on Windows allowed remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page, bypassing Chrome's security isolation.

Exploitability

Exploitation requires user interaction (e.g., visiting a malicious webpage) and precise memory manipulation, making it difficult but feasible for sophisticated attackers targeting Chrome on Windows.

Blast radius

Successful exploitation could lead to full system compromise outside the Chrome sandbox, enabling attackers to install malware, steal credentials, or pivot laterally within the host.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later on Windows systems.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.