CVE-2026-113072
Description
A flaw was found in chromium-browser. A memory corruption vulnerability exists in the handling of Cascading Style Sheets (CSS). A remote attacker could exploit this flaw by convincing a user to view a specially crafted HTML page, potentially leading to arbitrary code execution outside the browser's security sandbox.
Statement
This vulnerability is rated as an Important severity issue because successful exploitation requires user interaction to render untrusted web content, yet it presents a high blast radius allowing potential arbitrary code execution outside the sandbox. Chromium is not included as part of core Red Hat Enterprise Linux distributions, being provided only via community repositories like EPEL and Fedora. As a result, standard enterprise environments are not exposed to this flaw under default configurations.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
