CVE-2026-113264
Description
A flaw was found in chromium-browser. Improper input validation in the Extensions component allows a remote attacker to potentially execute arbitrary code within the browser's isolated sandbox environment. An attacker could exploit this vulnerability by enticing a user to visit a specially crafted HTML page.
Statement
This vulnerability is rated as Important severity because successful exploitation allows remote unauthenticated attackers to execute arbitrary code within the sandboxed browser process, although it requires user interaction to visit a malicious web page. While browser sandboxing limits direct access to the underlying host without an additional sandbox escape, an attacker could still compromise the confidentiality and integrity of session data. Chromium packages are distributed through community repositories such as Fedora and EPEL rather than core Red Hat Enterprise Linux channels.
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
