CVE-2026-113285 Google CVE debrief

Who should care

Defenders responsible for Google Chrome deployments on Windows should assess exposure and prioritize updating Chrome to the latest version. This High-severity vulnerability impacts Google Chrome deployments on Windows, requiring immediate attention from defenders to prevent potential remote code execution inside the sandbox. Affected operators, platforms, vulnerability-management, and security teams should review the supplied official advisory or CVErecord

Why it matters

CVE-2026-113285 is a High-severity memory corruption vulnerability in Google Chrome's ANGLE component. Defenders should prioritize updating Chrome to version 156.0.8078.47 or later to prevent potential remote code execution inside the sandbox.

• Remote code execution inside the sandbox
• Potential for attacker to gain elevated privileges
• Requires verification of Chrome version and exposure
• Defensive priority for updating Chrome

Technical summary

Memory corruption vulnerability in ANGLE (Almost Native Graphics Layer Engine) in Google Chrome on Windows prior to 156.0.8078.47. A remote attacker can execute arbitrary code inside the sandbox via a crafted HTML page. This High-severity vulnerability requires immediate attention from defenders to assess exposure and update Chrome to the latest version, focusing on affected product context and defensive impact without unsupported root-cause or exploit claims. Defenders should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Defensive priority

High

Recommended defensive actions

• Update Google Chrome to version 156.0.8078.47 or later
• Verify that Chrome is up-to-date in your environment
• Monitor Chrome for suspicious activity
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

Official CVE Program record and NIST NVD detail page confirm memory corruption vulnerability in Google Chrome. Chromium security severity is High. Evidence limits suggest verifying Chrome version and exposure in managed environments. Defenders should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.