CVE-2026-113008
개요
A flaw was found in the Transactions Platform in Google Chrome. A remote attacker can exploit this memory corruption vulnerability by enticing a user to visit a specially crafted HTML page. Successful exploitation may allow the attacker to execute arbitrary code within the browser's restricted sandbox environment.
내용
This vulnerability is rated with an Important severity because, although triggering the flaw requires user interaction to process untrusted web content and code execution is restricted by sandbox boundaries, it permits arbitrary code execution rather than merely causing a denial of service. Chromium is not packaged or supported within Red Hat Enterprise Linux releases, as it is distributed solely through community channels such as Fedora and EPEL. Consequently, standard Red Hat enterprise environments are not impacted under default configurations.
취약점 이해 (CWE)
Integrity
Technical Impact: Modify Memory; Execute Unauthorized Code or Commands
Write operations could cause memory corruption. In some cases, an adversary can modify control data such as return addresses in order to execute unexpected code.
Availability
Technical Impact: DoS: Crash, Exit, or Restart
Attempting to access out-of-range, invalid, or unauthorized memory could cause the product to crash.
Other
Technical Impact: Unexpected State
Subsequent write operations can produce undefined or unexpected results.
