CVE-2026-113075
Description
A flaw was found in the DevTools component of Chromium. A remote attacker could execute arbitrary code inside the browser sandbox by convincing a user to visit a crafted HTML page. This vulnerability is caused by a use-after-free condition, where the application improperly references memory that has already been deallocated.
Statement
Important severity is assigned to this flaw because an attacker can achieve arbitrary code execution within the sandboxed environment if a user navigates to a malicious web page, posing a substantial risk to system and data integrity. While exploitation requires active user interaction and execution is initially restricted by browser process isolation, the flaw could be chained with other vulnerabilities to escape the sandbox. In Red Hat ecosystems, Chromium is not included in core Red Hat Enterprise Linux products and is only available through community repositories such as Fedora and EPEL.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
