CVE-2026-113164
Description
A flaw was found in the Voice component of Google Chrome. A remote attacker can execute arbitrary code inside the browser's sandbox (an isolated security environment) by enticing a user to visit a specially crafted HTML page. This vulnerability is caused by a memory corruption flaw within the component.
Statement
This vulnerability is rated as Important severity because an unauthenticated remote attacker could achieve arbitrary code execution within the browser's sandbox environment if a user is persuaded to visit a specially crafted web page. Chromium is not included in core Red Hat Enterprise Linux repositories and is only available through community channels such as EPEL and Fedora. Furthermore, triggering the flaw requires user interaction, and browser sandboxing mitigates immediate access to the underlying host operating system.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
