CVE-2026-112998
Description
A flaw was found in chromium-browser. A memory corruption vulnerability in the Views user interface framework allows a remote attacker to execute arbitrary code within the application's sandbox (an isolated security environment). To exploit this flaw, an attacker must convince a user to visit a specially crafted HTML page.
Statement
Red Hat rates this vulnerability as Important because it enables remote code execution upon visiting a malicious web page, though the blast radius is constrained within the process sandbox. Chromium is not packaged within supported Red Hat Enterprise Linux releases, restricting exposure primarily to community channels such as EPEL. Exploitation requires user interaction to process hostile web content, and escaping containment would require chaining this flaw with a separate privilege escalation vulnerability.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
