CVE-2026-113015
Description
A flaw was found in chromium-browser. Due to improper memory handling (a use-after-free condition) within the Workers component, a remote attacker can execute arbitrary code inside the browser's sandbox environment. To exploit this vulnerability, the attacker must convince a user to load a specially crafted HTML page.
Statement
This vulnerability is rated as Important because unauthenticated remote attackers can execute code inside the renderer sandbox by enticing a user to visit malicious web content. Chromium is not packaged in core Red Hat Enterprise Linux, limiting exposure to systems utilizing Fedora or EPEL packages. Although the operating system sandbox restricts broader host compromise, the flaw enables attackers to compromise worker threads and access sensitive session state.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
