CVE-2026-113186: Memory corruption in Google Chrome

CVE-2026-113186 is a memory corruption vulnerability in the DevTools feature of Google Chrome versions before 156.0.8078.47. Exploitation requires a remote attacker to deliver a specially crafted HTML page that triggers arbitrary code execution outside the browser sandbox. The vulnerability affects desktop Chrome installations and was publicly disclosed with a low severity rating by the Chromium security team. The vendor advisory linked confirms the issue and the availability of a fixed version.

Successful exploitation could allow remote code execution outside the sandbox, potentially compromising the affected system. However, the Chromium security team has assessed the severity as low, indicating limited impact or exploitability under typical conditions. There are no known exploits in the wild at this time.

A fixed version of Google Chrome is available at 156.0.8078.47. Users and administrators should update to this version or later to remediate the vulnerability. Since this is not a cloud service, remediation requires client-side patching. No additional mitigation steps are indicated by the vendor advisory.