CVE-2026-113084
Description
A flaw was found in chromium-browser. A remote attacker could potentially achieve arbitrary code execution outside the sandbox by tricking a user into visiting a crafted HTML page. This vulnerability stems from an input validation issue within the Permissions component, which allows an attacker to escape the browser sandbox (an isolated security environment that restricts access to system resources) and run unauthorized code on the host system.
Statement
This vulnerability is rated as Important because successful exploitation allows an attacker to escape sandbox boundaries and execute arbitrary code on the underlying host, significantly expanding the blast radius beyond the isolated renderer process. Although triggering the issue requires user interaction to open an untrusted webpage, the failure of process isolation mechanisms allows complete compromise of the user's desktop session. In Red Hat environments, Chromium is provided through Extra Packages for Enterprise Linux (EPEL) rather than standard RHEL repositories, restricting enterprise exposure to systems where community desktop packages have been explicitly deployed.
Understanding the Weakness (CWE)
Confidentiality,Access Control,Availability
Technical Impact: Bypass Protection Mechanism; Gain Privileges or Assume Identity; Varies by Context
When security decisions such as authentication and authorization are made based on the values of these inputs, attackers can bypass the security of the product to access whatever is being protected. An attacker could change these inputs using customized clients or other attacks. This change might not be detected. The consequences will depend on the associated functionality, but they can range from granting additional privileges to untrusted users to bypassing important security checks. Ultimately, this weakness may lead to exposure or modification of sensitive data, system crash, or execution of arbitrary code.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
