CVE-2026-113125
Description
A flaw was found in chromium-browser. DevTools is vulnerable to memory corruption when handling web content. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted HTML page, allowing arbitrary code execution within the isolated browser sandbox.
Statement
This vulnerability is rated as Important severity because successful exploitation can allow a remote attacker to achieve arbitrary code execution, though execution is constrained within the browser's sandbox and requires user interaction. Chromium is not shipped or supported in core Red Hat Enterprise Linux repositories and is only available through community channels such as Fedora and EPEL. Exploitation requires convincing a user to open specially crafted HTML content in the browser.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
