CVE-2026-113336

Summary

A memory corruption vulnerability in Chrome's Compositing component allowed remote code execution outside the sandbox via a malicious HTML page.

Exploitability

Requires user interaction (e.g., visiting a crafted page) and exploitation is non-trivial due to modern mitigations, but possible given the high severity rating.

Blast radius

Successful exploitation could lead to full system compromise, data theft, or lateral movement from a compromised browser sandbox.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade Google Chrome to version 156.0.8078.47 or later.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.