CVE-2026-113152 Google CVE debrief

Who should care

Defenders responsible for Google Chrome deployments should assess exposure and prioritize updates to prevent potential arbitrary code execution. This includes IT teams managing Chrome installations, security teams monitoring for suspicious activity, and operators responsible for reviewing sandbox configurations. The vulnerability's impact is considered low, but defenders should still prioritize updates and monitoring.

Why it matters

CVE-2026-113152 is a memory corruption vulnerability in Google Chrome's SignIn feature, allowing potential arbitrary code execution inside the sandbox. Defenders should prioritize verifying Chrome versions, updating to 156.0.8078.47 or later, monitoring for suspicious activity, and reviewing sandbox configurations.

• Potential arbitrary code execution inside the sandbox
• Verification of Chrome versions and updates required
• Monitoring for suspicious HTML page activity recommended
• Review of sandbox configurations necessary

Technical summary

Memory corruption in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability affects Google Chrome deployments, requiring defenders to assess exposure and prioritize updates. Technical details are limited to CVE Program and source item information, indicating a need for defenders to focus on verifying Chrome versions and updating to the latest version. The vulnerability's impact is considered low, but defenders should still prioritize updates.

Defensive priority

Defenders should prioritize verifying Chrome versions and updating to 156.0.8078.47 or later.

Recommended defensive actions

• Verify Chrome versions and update to 156.0.8078.47 or later
• Monitor for suspicious HTML page activity
• Review sandbox configurations
• Perform vulnerability assessment
• Implement compensating controls
• Track exceptions and retest remediated assets
• Review relevant monitoring and detection logs

Evidence notes

The CVE record and source item provide details on the memory corruption vulnerability in Google Chrome's SignIn feature. Defenders should verify Chrome versions, update to 156.0.8078.47 or later, and monitor for suspicious activity. The vulnerability allows potential arbitrary code execution inside the sandbox via a crafted HTML page. Evidence is limited to CVE Program and source item details.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.