CVE-2026-113287 Google CVE debrief

Who should care

Defenders responsible for managing and securing Google Chrome installations, particularly in environments where exposure to untrusted or user-generated content is common, should prioritize updating Chrome to the latest version. This vulnerability's potential impact on systems that rely on Chrome for critical operations or as a primary browser for user activity necessitates prompt attention.

Why it matters

CVE-2026-113287 is a use-after-free vulnerability in Google Chrome's Prompts feature that allows remote attackers to execute arbitrary code within the sandbox. Defenders should prioritize patching due to potential for exploitation, but specific impact and exploitation details are limited.

• Remote code execution within the sandbox requires verification
• Potential for crafted HTML pages to exploit vulnerability
• Need for prompt patching to prevent exploitation
• Limited information on in-the-wild exploitation

Technical summary

The CVE-2026-113287 vulnerability is a use-after-free issue in the Prompts feature of Google Chrome. This vulnerability allows a remote attacker to execute arbitrary code within the sandbox of the browser by providing a crafted HTML page. The issue was addressed in Google Chrome version 156.0.8078.47. Defenders should prioritize patching due to potential for exploitation. Keeping browser software up-to-date is crucial to mitigate potential risks. The vulnerability's impact on systems relying on Chrome for critical operations necessitates prompt attention.

Defensive priority

Medium

Recommended defensive actions

• Update Google Chrome to version 156.0.8078.47 or later
• Review and enforce secure coding practices for HTML page development
• Monitor browser software for updates and apply patches promptly
• Conduct an inventory of assets using Google Chrome to identify potential exposure
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and source item provide details on the vulnerability, including its existence in Chrome versions prior to 156.0.8078.47 and the potential for remote code execution within the sandbox. However, specific details about exploitation or victim impact are not provided.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.