CVE-2026-113328

Summary

Improper input validation in Google Chrome prior to version 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page, undermining Chrome's core security isolation.

Exploitability

Exploitation requires user interaction (e.g., visiting a malicious webpage) and is non-trivial due to Chrome’s existing mitigations, though the Medium Chromium severity suggests limited but plausible exploit feasibility.

Blast radius

Successful exploitation could lead to full system compromise via sandbox escape, enabling attackers to steal sensitive data, install malware, or pivot within the host environment.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.