CVE-2026-113179
Description
A flaw was found in chromium-browser. A remote attacker could execute arbitrary code within the browser sandbox by convincing a user to open a specially crafted HTML page. This issue is caused by a use-after-free memory error in the Paint component.
Statement
This vulnerability is rated as having an Important severity because successful exploitation allows remote code execution within the browser's renderer sandbox, though it requires user interaction to visit a malicious site and is constrained from accessing the host operating system directly without an additional sandbox escape. In Red Hat environments, Chromium is primarily deployed on graphical desktop workstations or via EPEL rather than standard enterprise server installations, reducing widespread exposure. Impact is limited to users actively rendering untrusted web content within the affected browser application.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
