CVE-2026-113255
Description
A flaw was found in chromium-browser. A remote attacker could achieve arbitrary code execution within the browser's sandbox environment by convincing a user to open a specially crafted HTML page. This vulnerability is caused by a use-after-free memory error in the CustomTabs component.
Statement
This vulnerability is rated as Important severity because successful exploitation allows remote code execution when an unsuspecting user visits a malicious web page, though the compromise remains confined within the client-side sandbox. Chromium packages are not provided directly in Red Hat Enterprise Linux core repositories and are only delivered through community channels such as Fedora and Extra Packages for Enterprise Linux (EPEL). Furthermore, the affected CustomTabs implementation is specific to mobile platforms, significantly reducing real-world exposure across standard Linux desktop and workstation deployments.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
