CVE-2026-113175
Description
A flaw was found in chromium-browser. Due to improper input validation in the FileSystem component, a remote attacker can convince a user to visit a specially crafted HTML page to achieve arbitrary code execution. Successful exploitation allows the attacker to run unauthorized commands within the browser's sandbox (an isolated security environment designed to restrict application permissions).
Statement
This vulnerability is rated as Important rather than Critical because code execution is restricted to the browser's sandbox and requires a user to navigate to a malicious website. Red Hat Enterprise Linux does not include Chromium in core repositories or default installations, limiting exposure to systems running community packages from EPEL or Fedora. Server environments that do not run graphical desktop applications or web browsers are not exposed to this risk.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
