CVE-2026-113036
Description
A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the application's restricted security environment (sandbox). By convincing a user to visit a specially crafted HTML page, an attacker can trigger memory corruption within the browser's HTML component.
Statement
This vulnerability is rated as an Important impact because an unauthenticated remote attacker could achieve code execution when a victim renders malicious web content, even though execution remains constrained within the renderer sandbox. Chromium is not distributed in core Red Hat Enterprise Linux releases and is only maintained through Fedora and EPEL community repositories. Exploitation requires direct user interaction to visit an untrusted page, significantly limiting exposure on standard enterprise server deployments.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
