CVE-2026-113221
Description
A flaw was found in the Google Lens component of chromium-browser. This issue is caused by a use-after-free vulnerability, which occurs when memory is accessed after it has been released. A remote attacker could exploit this flaw by enticing a user to open a specially crafted HTML page, potentially allowing arbitrary code execution within the browser sandbox.
Statement
This vulnerability is rated as Important because an unauthenticated remote attacker could achieve arbitrary code execution within the browser's sandbox by tricking a user into rendering malicious web content. Although built-in sandboxing mitigates full host compromise without an auxiliary escape vulnerability, the potential for arbitrary code execution in the client context meets the criteria for this severity. Chromium is shipped through EPEL and Fedora community repositories and is not part of core Red Hat Enterprise Linux installations.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
