CVE-2026-113114
Description
A flaw was found in chromium-browser. The SignIn component is vulnerable to a use-after-free condition, where memory is accessed after it has been released. By enticing a user to visit a specially crafted HTML page, a remote attacker could exploit this vulnerability to execute arbitrary code within the browser's isolated sandbox environment.
Statement
This vulnerability is rated as Important severity because it enables an unauthenticated remote attacker to achieve arbitrary code execution within the client sandbox, posing a significant risk to process integrity. Red Hat Enterprise Linux does not distribute the Chromium browser in core platform channels, limiting potential exposure to community environments such as Fedora and EPEL. Successful exploitation requires user interaction to access a maliciously crafted web destination.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
