← Back to search

CVE-2026-113342

9.6 CRITICAL

Published 2026-10-20 · Updated 2026-10-22

AI risk analysis

Summary
A memory corruption vulnerability in Chrome's Network component allowed remote attackers to execute arbitrary code outside the sandbox by tricking users into visiting a malicious HTML page.
Exploitability
Exploitation requires user interaction (e.g., visiting a crafted webpage) and high reliability due to the memory corruption nature, but no public exploit is available.
Blast radius
Successful exploitation could lead to full system compromise outside Chrome's sandbox, enabling attackers to steal data, install malware, or pivot laterally.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade Google Chrome to version 156.0.8078.47 or later.
memory-corruptionsandbox-escapercewebchrome

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Memory corruption in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weaknesses

CWE-119

Vendors

google

Products

chrome

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.