CVE-2026-113120
Description
A flaw was found in Chromium's Media component. Improper input validation allows a remote attacker to potentially execute arbitrary code inside the browser's restricted sandbox environment by enticing a user to visit a specially crafted HTML page.
Statement
This vulnerability is rated as Important rather than Critical because, while remote code execution is possible, exploitation requires user interaction to load a malicious web page and execution remains confined within the browser's sandbox environment. Chromium is not distributed in core Red Hat Enterprise Linux channels and is only available through community-maintained repositories such as EPEL and Fedora. As a result, default Red Hat Enterprise Linux server and workstation installations are not exposed to this flaw unless community desktop packages are explicitly installed.
Understanding the Weakness (CWE)
Other
Technical Impact: Varies by Context
When untrusted input is not properly validated for the expected syntax, attackers could cause parsing failures, trigger unexpected errors, or expose latent vulnerabilities that might not be directly exploitable if the input had conformed to the syntax.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
