CVE-2026-113283: Memory corruption in Google Chrome

CVE-2026-113283 is a memory corruption vulnerability in the CredentialProvider module of Google Chrome on Windows platforms before version 156.0.8078.47. Exploitation requires a remote attacker to deliver a specially crafted HTML page that triggers the flaw, potentially enabling code execution outside the browser sandbox. The vulnerability was publicly disclosed with a medium severity rating by the Chromium security team. No CVSS score is provided. The vendor advisory URL indicates a stable channel update addressing this issue.

Successful exploitation could allow remote code execution outside the sandbox, increasing the attack surface and potentially compromising the affected system. However, the vulnerability is rated medium severity, indicating a moderate level of risk. There are no known exploits in the wild at the time of publication.

A fix is available as indicated by the vendor advisory for Chrome version 156.0.8078.47. Users should update to this version or later to remediate the vulnerability. No additional mitigation steps are specified by the vendor.