CVE-2026-113260
Description
A flaw was found in Chromium. This flaw allows a remote attacker to execute arbitrary code inside the browser's isolated security environment (sandbox) via a specially crafted HTML page. The vulnerability stems from memory corruption in the browser's Core component.
Statement
This vulnerability is rated as Important rather than Critical because successful exploitation is restricted to the browser sandbox and requires user interaction to visit a malicious web page. Chromium packages are distributed only through Fedora and Extra Packages for Enterprise Linux (EPEL) community repositories, so core Red Hat Enterprise Linux releases do not ship or support this software. While an attacker could achieve arbitrary execution within the confined renderer process, compromising the underlying host system requires chaining this issue with an additional privilege escalation or sandbox escape vulnerability.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
