CVE-2026-113136
Description
A flaw was found in chromium-browser. A memory corruption issue in the DevTools component allows a remote attacker to achieve arbitrary code execution within the browser's isolated sandbox. To exploit this vulnerability, an attacker must convince a user to open a specially crafted HTML page.
Statement
This vulnerability is rated as Important severity because successful exploitation permits arbitrary code execution upon loading malicious web content, although attacker privileges remain confined within the browser's isolated sandbox. Chromium is not distributed as part of core Red Hat Enterprise Linux products and is only available via community channels such as EPEL and Fedora. Consequently, typical enterprise deployments remain unexposed by default unless these optional community packages have been installed.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
