CVE-2026-113132
Description
A flaw was found in the DevTools component of Chromium. A remote attacker could exploit this memory corruption vulnerability by enticing a user to load a specially crafted HTML page. Successful exploitation may allow an attacker to execute arbitrary code inside the browser sandbox.
Statement
This vulnerability is rated as Important severity because arbitrary code execution within the browser's sandbox environment could occur upon visiting an untrusted page. Although exploitation requires a user to open specially crafted web content, the potential execution of unauthorized code warrants an Important rating rather than Moderate. Chromium is not distributed as part of core Red Hat Enterprise Linux releases, though packages are available via Fedora and EPEL community channels.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
