CVE-2026-113176
Description
A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by enticing a user to visit a crafted HTML page. Successful exploitation causes memory corruption in the browser address bar (Omnibox), which may allow the attacker to execute arbitrary code within the restricted browser sandbox.
Statement
Red Hat has assigned an Important security impact to this vulnerability because an attacker can achieve code execution within the isolated process sandbox, provided a user is tricked into loading malicious web content. Without a separate privilege escalation or sandbox escape mechanism, the impact remains confined to the browser's restricted runtime environment. Furthermore, Chromium is not shipped in Red Hat Enterprise Linux core channels and is packaged only within community repositories like Fedora and EPEL, meaning typical enterprise server installations are not exposed.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
