CVE-2026-113093
Description
A flaw was found in the DisplayLocking component of chromium-browser. This memory corruption vulnerability allows a remote attacker to potentially achieve arbitrary code execution within the browser's restricted security sandbox. Exploitation requires convincing a user to open a specially crafted HTML page.
Statement
This vulnerability is rated as Important because an attacker can trigger memory corruption within the renderer process by luring a user to an untrusted web page. While chromium-browser is not provided in core Red Hat Enterprise Linux and is packaged only in community channels such as EPEL, desktop workstations processing external web resources remain exposed. The severity is capped at Important rather than Critical because the blast radius is constrained by the browser sandbox, preventing direct access to the underlying host system without a secondary privilege escalation.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
