CVE-2026-112992
Description
A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption vulnerability in the Canvas component by convincing a user to visit a specially crafted web page. Successful exploitation could allow the attacker to execute arbitrary code outside of the browser's security sandbox.
Statement
This vulnerability is rated as an Important severity because successful exploitation enables remote arbitrary code execution escaping the browser sandbox, although it requires user interaction to visit a malicious webpage. Chromium is not included in core Red Hat Enterprise Linux offerings, significantly reducing overall enterprise risk. For desktop environments running community packages such as Fedora or EPEL, user exposure is present whenever untrusted web graphics are rendered.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
