CVE-2026-113086
Description
A flaw was found in Google Chrome's Input component. This vulnerability allows a remote attacker to execute arbitrary code within the restricted browser sandbox by convincing a user to visit a specially crafted HTML page. The issue stems from improper validation of input during processing.
Statement
Red Hat has evaluated this vulnerability as having an Important severity because it enables an unauthenticated remote attacker to achieve arbitrary code execution, though execution is confined within the renderer sandbox. Exploitation requires user interaction, specifically persuading a user to load a malicious web document. Chromium is not included in core Red Hat Enterprise Linux and is delivered via community repositories such as EPEL and Fedora, which significantly limits exposure in standard server environments.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
