CVE-2026-113112
Description
A flaw was found in chromium-browser. A use-after-free vulnerability exists within the Extensions component. A remote attacker could exploit this flaw by enticing a user to view a specially crafted HTML page, potentially allowing arbitrary code execution within the browser's sandbox environment.
Statement
Red Hat Product Security rates this vulnerability as Important because it enables remote code execution within the browser's sandbox upon navigating to an untrusted web page, without requiring prior authentication. Although operating system boundaries remain enforced by the browser sandbox, preventing direct host compromise, the complete takeover of the renderer process warrants an Important severity rating. Chromium is not shipped in core Red Hat Enterprise Linux and is only distributed through community repositories such as EPEL and Fedora.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
