CVE-2026-113177
Description
A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by tricking a user into visiting a specially crafted HTML page. The vulnerability is caused by a use-after-free condition in the FileSystem component, where memory is improperly accessed after it has already been released.
Statement
Red Hat has evaluated this vulnerability as Important because an unauthenticated remote attacker can trigger sandbox-level code execution by convincing a user to visit a malicious website, compromising the active browser session. Although the sandbox prevents immediate compromise of the underlying host system without a secondary breakout exploit, the blast radius encompasses all data processed within the browser instance. Chromium is not distributed in core Red Hat Enterprise Linux channels, restricting exposure mainly to Fedora and EPEL community environments.
Understanding the Weakness (CWE)
Confidentiality
Technical Impact: Read Memory
If the expired pointer is used in a read operation, an attacker might be able to control data read in by the application.
Availability
Technical Impact: DoS: Crash, Exit, or Restart
If the expired pointer references a memory location that is not accessible to the product, or points to a location that is "malformed" (such as NULL) or larger than expected by a read or write operation, then a crash may occur.
Integrity,Confidentiality,Availability
Technical Impact: Execute Unauthorized Code or Commands
If the expired pointer is used in a function call, or points to unexpected data in a write operation, then code execution may be possible.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
