CVE-2026-113158
Description
A flaw was found in chromium-browser. A use-after-free vulnerability in the Streaming component allows a remote attacker to achieve arbitrary code execution inside the sandbox. By convincing a user to open a specially crafted HTML page, an attacker can trigger memory corruption to compromise the browser process.
Statement
This vulnerability is rated as Important because successful exploitation allows a remote attacker to execute arbitrary code within the browser sandbox if a user accesses an untrusted web page. Red Hat Enterprise Linux does not package Chromium in core supported repositories, providing it only through community channels such as EPEL. Although the browser sandbox restricts the attacker from directly compromising the underlying host operating system, the potential for code execution inside the renderer poses a serious threat to the confidentiality and integrity of user sessions.
Understanding the Weakness (CWE)
Confidentiality
Technical Impact: Read Memory
If the expired pointer is used in a read operation, an attacker might be able to control data read in by the application.
Availability
Technical Impact: DoS: Crash, Exit, or Restart
If the expired pointer references a memory location that is not accessible to the product, or points to a location that is "malformed" (such as NULL) or larger than expected by a read or write operation, then a crash may occur.
Integrity,Confidentiality,Availability
Technical Impact: Execute Unauthorized Code or Commands
If the expired pointer is used in a function call, or points to unexpected data in a write operation, then code execution may be possible.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
