CVE-2026-113190
Description
A flaw was found in chromium-browser. A use-after-free memory vulnerability in the ServiceWorker component allows a remote attacker to execute arbitrary code within the browser sandbox. An attacker could exploit this flaw by tricking a user into visiting a specially crafted HTML page.
Statement
This vulnerability is rated as Important severity because it allows a remote attacker to achieve arbitrary code execution within the browser's sandbox when processing malicious web content. Chromium is not shipped in supported Red Hat Enterprise Linux releases and is only distributed through community repositories such as Fedora and EPEL. Exploitation requires user interaction to visit an untrusted page, and default sandboxing mechanisms limit the blast radius to the unprivileged renderer process, preventing direct compromise of the host operating system.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
