CVE-2026-113145
Description
A flaw was found in Google Chrome's Messages component on Android. A remote attacker could exploit this memory corruption vulnerability by convincing a user to open a crafted HTML page. Successful exploitation could allow the attacker to execute arbitrary code within the browser's restricted sandbox environment.
Statement
This vulnerability is rated with an Important severity because it could permit an unauthenticated remote adversary to achieve code execution within sandboxed process boundaries if a victim processes untrusted web content. Red Hat Enterprise Linux does not distribute the Chromium browser suite in core repositories, restricting potential exposure strictly to community-maintained packages such as those in Fedora and EPEL. Furthermore, because the flaw is isolated to Android-specific messaging functionality, standard enterprise Linux desktop and server installations do not expose the vulnerable subsystem.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
