CVE-2026-113108
Description
A flaw was found in chromium-browser's Script component. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, triggering memory corruption through a use-after-free condition where released memory is improperly accessed. Successful exploitation could allow an attacker to execute arbitrary code inside the browser's sandboxed environment.
Statement
Red Hat has evaluated this vulnerability as Important because an unauthenticated remote attacker can trigger code execution within the browser's sandbox without requiring elevated host privileges. Although exploitation necessitates user interaction to open a malicious link or web page, successful execution compromises the renderer process and can serve as a stepping stone in sandbox escape attacks. In default Red Hat Enterprise Linux installations, Chromium is not included in core channels and is available only through community repositories such as EPEL, limiting systemic risk to enterprise servers.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
