CVE-2026-113183
Description
A flaw was found in the Federated Credential Management (FedCM) component of chromium-browser. This memory corruption vulnerability allows a remote attacker to potentially execute arbitrary code within the browser sandbox by convincing a user to visit a crafted HTML page. Successful exploitation compromises the browser's restricted execution environment and may lead to application crashes.
Statement
This vulnerability is rated as having Important impact because a remote attacker can achieve code execution within the sandboxed browser process if an unprivileged user is enticed into visiting a malicious website. Although exploitation requires user interaction to navigate to attacker-controlled web content, successful exploitation undermines the application's process boundary. Red Hat Enterprise Linux does not ship chromium-browser in core enterprise repositories; it is only distributed through community channels such as EPEL and Fedora.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
