CVE-2026-113147
Description
A flaw was found in the WebShare component of Chromium. Improper input validation allows a remote attacker to execute arbitrary code within the restricted browser sandbox by convincing a user to visit a crafted HTML page.
Statement
This vulnerability is rated as Important severity because an unauthenticated remote adversary can achieve code execution within the browser sandbox upon luring a user to view hostile web content. Although exploitation requires user interaction and remains constrained by underlying containment mechanisms, the risk of remote instruction execution elevates this flaw beyond a Moderate rating. Within the Red Hat ecosystem, Chromium is not part of core Red Hat Enterprise Linux releases and is maintained only in Fedora and EPEL repositories.
Understanding the Weakness (CWE)
Other
Technical Impact: Varies by Context
When input does not comply with the expected type, attackers could trigger unexpected errors, cause incorrect actions to take place, or exploit latent vulnerabilities that would not be possible if the input conformed with the expected type.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
