CVE-2026-113123
Description
A flaw was found in chromium-browser. A use-after-free flaw in the GPU (Graphics Processing Unit) component allows memory to be improperly accessed after it has been released. A remote attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page, potentially leading to arbitrary code execution within the browser sandbox.
Statement
This vulnerability is assessed with an Important severity because successful exploitation permits remote code execution within the client sandbox upon visiting a malicious website. Chromium is packaged in community channels such as EPEL and Fedora rather than core Red Hat Enterprise Linux system distributions. While attack execution requires active user interaction and remains constrained by sandbox containment, the risk of session compromise and memory corruption justifies the Important rating.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
