CVE-2026-113198
Description
A flaw was found in chromium-browser. A use-after-free memory flaw exists within the Extensions subsystem, where memory is improperly accessed after it has been freed. By enticing a user to visit a specially crafted HTML page, a remote attacker could trigger this vulnerability to execute arbitrary code within the browser sandbox.
Statement
This vulnerability is rated as an Important severity because an unauthenticated remote attacker could compromise the browser process and execute arbitrary code if a user visits a malicious website, although the impact remains confined to the application sandbox. In the Red Hat ecosystem, Chromium is not shipped or supported in Red Hat Enterprise Linux and is only packaged for community distributions like Fedora and EPEL. Consequently, default enterprise deployments and server environments do not include this software and are not affected unless the package has been explicitly installed from community repositories.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
